Warning: Permanently added '[localhost]:17735' (ECDSA) to the list of known hosts.
2026/01/17 02:44:19 fuzzer started
2026/01/17 02:44:19 dialing manager at localhost:42157
syzkaller login: [   59.705391] cgroup: Unknown subsys name 'net'
[   59.807008] cgroup: Unknown subsys name 'cpuset'
[   59.820507] cgroup: Unknown subsys name 'rlimit'
2026/01/17 02:44:29 syscalls: 201
2026/01/17 02:44:29 code coverage: enabled
2026/01/17 02:44:29 comparison tracing: enabled
2026/01/17 02:44:29 extra coverage: enabled
2026/01/17 02:44:29 setuid sandbox: enabled
2026/01/17 02:44:29 namespace sandbox: enabled
2026/01/17 02:44:29 Android sandbox: enabled
2026/01/17 02:44:29 fault injection: enabled
2026/01/17 02:44:29 leak checking: enabled
2026/01/17 02:44:29 net packet injection: enabled
2026/01/17 02:44:29 net device setup: enabled
2026/01/17 02:44:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/17 02:44:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/17 02:44:29 USB emulation: enabled
2026/01/17 02:44:29 hci packet injection: enabled
2026/01/17 02:44:29 wifi device emulation: enabled
2026/01/17 02:44:29 802.15.4 emulation: enabled
2026/01/17 02:44:29 fetching corpus: 0, signal 0/0 (executing program)
2026/01/17 02:44:31 starting 8 fuzzer processes
02:44:31 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
personality(0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:44:31 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8a9498f548cc4fc17cdcbf8231bc9198"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "afd87e4dc67fab77a8ad5221f7dfb0da"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004041}, 0x80)

02:44:31 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000006c0)={r1, r5, 0xb09})

02:44:31 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2cc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xac, 0x3, "c1e29efeab575624bbadb7878c169620e13cb4667505976e61776eac26b8ece7db1cf2f0b871678b8729898449f61f7d54d48ffc227fe33d5b62e8cb63a78e09005edbcd34697a86de67b54891393557d103f4b0cee6fa5587082502891d1685b71df75c793e916bf8c92596b92e5da158e7393a6f04108dc8e99f2e2497c49658c77a9136e1ec583a3c83ef9c688fc18eacec4a043c4cd193891c8a5e905ddb9c08cdd7db6e4269"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "5d5c8ec97c115a6e1f10b4ba387cc6c9eb4b79fa034a4e33795bc6ad5a99afc7542b400d82186972a4624ce951f5e2c9c0af74df284a2eedc7088bc16a5a8302b958108a43e63896375e5992c9e5327b1b476860f026e21d8600b1a2287ca069f5a6c44ea18c8768085cad3ca9b71b2dd12a8b60cab664f0fe684287b5bf293329587b5a774550d36b300806665459dfa85d8d4fb65ca730ced171766af6c0b4c1be7ed10b4c62f61318ff404278e83d2f45c4fe69f414f11069501c92082e5cf62a05c58632bd56a92a54c40bbc2fbd93f033"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff29f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x40800)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001dc0)={0x4b4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

02:44:31 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})
shmctl$IPC_RMID(r0, 0x0)
getgid()

02:44:31 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000380)={r8, r3, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r9=>0x0)
io_submit(r9, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r11 = epoll_create(0x1)
epoll_pwait(r11, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
r12 = syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
io_cancel(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, r12, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r4}, &(0x7f0000000700))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r13, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e336e2321de64e272229b1d6361f21f0ea5addf1b63ddf51"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x14048010)

02:44:31 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:44:31 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
clock_gettime(0x0, &(0x7f0000002280)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0)={r7, r8+10000000}, &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

[   70.631286] audit: type=1400 audit(1768617871.448:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   71.814070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.816867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.819862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.829988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.835224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.872226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.876430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.880146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.885600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.889241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.971521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.982407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.984464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.986586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.991172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.992334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.994837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.031379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.033059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.042328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.044163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.051220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   72.053085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   72.054814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   72.057806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   72.059877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   72.067148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   72.068414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   72.070523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   72.072016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   72.073118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   72.074898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   72.078830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   72.080771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   72.084019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   72.086966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   72.135237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.137436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.146249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.156215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.911308] Bluetooth: hci1: command tx timeout
[   73.912242] Bluetooth: hci0: command tx timeout
[   74.102795] Bluetooth: hci3: command tx timeout
[   74.168121] Bluetooth: hci6: command tx timeout
[   74.168598] Bluetooth: hci7: command tx timeout
[   74.232787] Bluetooth: hci4: command tx timeout
[   74.233311] Bluetooth: hci2: command tx timeout
[   74.233999] Bluetooth: hci5: command tx timeout
[   75.959058] Bluetooth: hci0: command tx timeout
[   75.960050] Bluetooth: hci1: command tx timeout
[   76.151873] Bluetooth: hci3: command tx timeout
[   76.215390] Bluetooth: hci7: command tx timeout
[   76.217772] Bluetooth: hci6: command tx timeout
[   76.278760] Bluetooth: hci2: command tx timeout
[   76.279468] Bluetooth: hci5: command tx timeout
[   76.281859] Bluetooth: hci4: command tx timeout
[   78.008707] Bluetooth: hci0: command tx timeout
[   78.009124] Bluetooth: hci1: command tx timeout
[   78.198764] Bluetooth: hci3: command tx timeout
[   78.263713] Bluetooth: hci7: command tx timeout
[   78.264105] Bluetooth: hci6: command tx timeout
[   78.326732] Bluetooth: hci5: command tx timeout
[   78.327157] Bluetooth: hci4: command tx timeout
[   78.327538] Bluetooth: hci2: command tx timeout
[   80.054785] Bluetooth: hci1: command tx timeout
[   80.055542] Bluetooth: hci0: command tx timeout
[   80.246781] Bluetooth: hci3: command tx timeout
[   80.311825] Bluetooth: hci6: command tx timeout
[   80.312543] Bluetooth: hci7: command tx timeout
[   80.374798] Bluetooth: hci2: command tx timeout
[   80.375531] Bluetooth: hci4: command tx timeout
[   80.376329] Bluetooth: hci5: command tx timeout
[  108.353589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.354259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.677306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.678304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.781195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.783790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.985716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.986527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.063015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.063632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.211454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.215733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.399814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.400427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.469830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.470456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.593440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.594047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.736646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.747728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:45:10 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:10 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8a9498f548cc4fc17cdcbf8231bc9198"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "afd87e4dc67fab77a8ad5221f7dfb0da"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004041}, 0x80)

02:45:11 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:11 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2cc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xac, 0x3, "c1e29efeab575624bbadb7878c169620e13cb4667505976e61776eac26b8ece7db1cf2f0b871678b8729898449f61f7d54d48ffc227fe33d5b62e8cb63a78e09005edbcd34697a86de67b54891393557d103f4b0cee6fa5587082502891d1685b71df75c793e916bf8c92596b92e5da158e7393a6f04108dc8e99f2e2497c49658c77a9136e1ec583a3c83ef9c688fc18eacec4a043c4cd193891c8a5e905ddb9c08cdd7db6e4269"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "5d5c8ec97c115a6e1f10b4ba387cc6c9eb4b79fa034a4e33795bc6ad5a99afc7542b400d82186972a4624ce951f5e2c9c0af74df284a2eedc7088bc16a5a8302b958108a43e63896375e5992c9e5327b1b476860f026e21d8600b1a2287ca069f5a6c44ea18c8768085cad3ca9b71b2dd12a8b60cab664f0fe684287b5bf293329587b5a774550d36b300806665459dfa85d8d4fb65ca730ced171766af6c0b4c1be7ed10b4c62f61318ff404278e83d2f45c4fe69f414f11069501c92082e5cf62a05c58632bd56a92a54c40bbc2fbd93f033"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff29f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x40800)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001dc0)={0x4b4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

02:45:11 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8a9498f548cc4fc17cdcbf8231bc9198"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "afd87e4dc67fab77a8ad5221f7dfb0da"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004041}, 0x80)

02:45:11 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000380)={r8, r3, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r9=>0x0)
io_submit(r9, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r11 = epoll_create(0x1)
epoll_pwait(r11, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
r12 = syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
io_cancel(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, r12, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r4}, &(0x7f0000000700))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r13, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e336e2321de64e272229b1d6361f21f0ea5addf1b63ddf51"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x14048010)

[  110.652821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.653417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:45:11 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

[  110.754381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.755000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.801003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.801561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:45:11 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2cc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xac, 0x3, "c1e29efeab575624bbadb7878c169620e13cb4667505976e61776eac26b8ece7db1cf2f0b871678b8729898449f61f7d54d48ffc227fe33d5b62e8cb63a78e09005edbcd34697a86de67b54891393557d103f4b0cee6fa5587082502891d1685b71df75c793e916bf8c92596b92e5da158e7393a6f04108dc8e99f2e2497c49658c77a9136e1ec583a3c83ef9c688fc18eacec4a043c4cd193891c8a5e905ddb9c08cdd7db6e4269"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "5d5c8ec97c115a6e1f10b4ba387cc6c9eb4b79fa034a4e33795bc6ad5a99afc7542b400d82186972a4624ce951f5e2c9c0af74df284a2eedc7088bc16a5a8302b958108a43e63896375e5992c9e5327b1b476860f026e21d8600b1a2287ca069f5a6c44ea18c8768085cad3ca9b71b2dd12a8b60cab664f0fe684287b5bf293329587b5a774550d36b300806665459dfa85d8d4fb65ca730ced171766af6c0b4c1be7ed10b4c62f61318ff404278e83d2f45c4fe69f414f11069501c92082e5cf62a05c58632bd56a92a54c40bbc2fbd93f033"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff29f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x40800)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001dc0)={0x4b4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

[  110.968047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.968632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.138789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.139374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.165662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.166240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.199290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.200638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.206632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.207665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.823670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.827109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.828419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.831123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:22 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
personality(0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:45:22 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8a9498f548cc4fc17cdcbf8231bc9198"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "afd87e4dc67fab77a8ad5221f7dfb0da"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004041}, 0x80)

02:45:22 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})
shmctl$IPC_RMID(r0, 0x0)
getgid()

02:45:22 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:22 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2cc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xac, 0x3, "c1e29efeab575624bbadb7878c169620e13cb4667505976e61776eac26b8ece7db1cf2f0b871678b8729898449f61f7d54d48ffc227fe33d5b62e8cb63a78e09005edbcd34697a86de67b54891393557d103f4b0cee6fa5587082502891d1685b71df75c793e916bf8c92596b92e5da158e7393a6f04108dc8e99f2e2497c49658c77a9136e1ec583a3c83ef9c688fc18eacec4a043c4cd193891c8a5e905ddb9c08cdd7db6e4269"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "5d5c8ec97c115a6e1f10b4ba387cc6c9eb4b79fa034a4e33795bc6ad5a99afc7542b400d82186972a4624ce951f5e2c9c0af74df284a2eedc7088bc16a5a8302b958108a43e63896375e5992c9e5327b1b476860f026e21d8600b1a2287ca069f5a6c44ea18c8768085cad3ca9b71b2dd12a8b60cab664f0fe684287b5bf293329587b5a774550d36b300806665459dfa85d8d4fb65ca730ced171766af6c0b4c1be7ed10b4c62f61318ff404278e83d2f45c4fe69f414f11069501c92082e5cf62a05c58632bd56a92a54c40bbc2fbd93f033"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff29f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x40800)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001dc0)={0x4b4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

02:45:22 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000380)={r8, r3, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r9=>0x0)
io_submit(r9, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r11 = epoll_create(0x1)
epoll_pwait(r11, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
r12 = syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
io_cancel(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, r12, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r4}, &(0x7f0000000700))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r13, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e336e2321de64e272229b1d6361f21f0ea5addf1b63ddf51"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x14048010)

02:45:22 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000006c0)={r1, r5, 0xb09})

02:45:22 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
clock_gettime(0x0, &(0x7f0000002280)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0)={r7, r8+10000000}, &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

[  121.427889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.442380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.460650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.479589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:22 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000006c0)={r1, r5, 0xb09})

02:45:31 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff})
r8 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000380)={r8, r3, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r9=>0x0)
io_submit(r9, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r11 = epoll_create(0x1)
epoll_pwait(r11, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
r12 = syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
io_cancel(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, r12, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r4}, &(0x7f0000000700))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r13, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e336e2321de64e272229b1d6361f21f0ea5addf1b63ddf51"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x14048010)

02:45:31 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
clock_gettime(0x0, &(0x7f0000002280)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0)={r7, r8+10000000}, &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

02:45:31 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)
ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5)

02:45:31 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
personality(0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:45:31 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000006c0)={r1, r5, 0xb09})

02:45:31 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:31 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})
shmctl$IPC_RMID(r0, 0x0)
getgid()

02:45:31 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000013c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2cc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xac, 0x3, "c1e29efeab575624bbadb7878c169620e13cb4667505976e61776eac26b8ece7db1cf2f0b871678b8729898449f61f7d54d48ffc227fe33d5b62e8cb63a78e09005edbcd34697a86de67b54891393557d103f4b0cee6fa5587082502891d1685b71df75c793e916bf8c92596b92e5da158e7393a6f04108dc8e99f2e2497c49658c77a9136e1ec583a3c83ef9c688fc18eacec4a043c4cd193891c8a5e905ddb9c08cdd7db6e4269"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "5d5c8ec97c115a6e1f10b4ba387cc6c9eb4b79fa034a4e33795bc6ad5a99afc7542b400d82186972a4624ce951f5e2c9c0af74df284a2eedc7088bc16a5a8302b958108a43e63896375e5992c9e5327b1b476860f026e21d8600b1a2287ca069f5a6c44ea18c8768085cad3ca9b71b2dd12a8b60cab664f0fe684287b5bf293329587b5a774550d36b300806665459dfa85d8d4fb65ca730ced171766af6c0b4c1be7ed10b4c62f61318ff404278e83d2f45c4fe69f414f11069501c92082e5cf62a05c58632bd56a92a54c40bbc2fbd93f033"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd96}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff29f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x40800)

[  130.629036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.631620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.636395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.638313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:31 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)

02:45:41 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
r11 = syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
io_cancel(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, r11, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r3}, &(0x7f0000000700))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:45:41 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})
shmctl$IPC_RMID(r0, 0x0)
getgid()

02:45:41 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
clock_gettime(0x0, &(0x7f0000002280)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0)={r7, r8+10000000}, &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

02:45:41 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
personality(0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:45:41 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:45:41 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4d40, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x20005004)

02:45:41 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
[  140.336508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.338614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r8 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3)

02:45:41 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
[  140.366732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="196ba3b9e1f9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x54}}, 0x800)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

[  140.376276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:41 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r9, &(0x7f0000000540)={0x80000002})
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:45:41 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})
shmctl$IPC_RMID(r0, 0x0)

02:45:41 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)

02:45:41 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:45:41 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r7, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:41 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000ec0)={'bond_slave_0\x00'})
openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)

02:45:42 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:45:42 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
personality(0x6)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:45:42 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)

02:45:42 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
r7 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, r7, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})

[  141.522086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.560405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.579877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.592609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:42 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:45:42 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0), &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

02:45:42 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740))
syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:52 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:45:52 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0), &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

02:45:52 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:45:52 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)

02:45:52 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=<r6=>0x0)
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, r6, 0x0, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})

02:45:52 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000001740))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:45:52 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
syz_open_dev$sg(&(0x7f0000000640), 0xfffffffffffffffd, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:45:52 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000940)={0x4c8, r0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1d, 0xc, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x8000, 0x6, 0x6, 0x74, 0xfff9, 0x8, 0x50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8, 0x101, 0x1ff, 0x8, 0x1, 0x0, 0x8, 0x6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x20, 0x81, 0xff, 0x7d48, 0xfee, 0x5]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x7}, {0x3, 0x6}, {0x2, 0x5}, {0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7}, {0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6}, {0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfc00, 0x3ff, 0x3d, 0x2, 0x8001, 0xffc0]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {}, {0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6b, 0x16, 0xb, 0x12, 0x6c, 0x1, 0x6, 0x9, 0xb, 0x2, 0x18, 0x24, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x3, 0x11, 0xc, 0xc, 0x12, 0x6, 0x9, 0x5, 0x1b, 0x60, 0x2, 0x0, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xff, 0x0, 0x9, 0x6, 0x40, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x4, 0x7, 0xea40, 0xc3, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0xb, 0x3, 0xc, 0x18, 0x3, 0x9, 0x3, 0x3, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x9, 0x4, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x4, 0x16, 0x3, 0x2, 0x36, 0x3, 0xb, 0x48, 0x1, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x1d}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5cea, 0xff, 0x93, 0x7fff, 0x7, 0x6, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x3ff, 0xfd62, 0x0, 0xfffe, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x1, 0x7, 0x7ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x845, 0x8, 0x0, 0x8000, 0x3, 0x80, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x6}, {0x4}, {0x4, 0x2}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x1, 0x1, 0x0, 0x4, 0x1, 0x1b, 0xb, 0x1b, 0xb, 0x12, 0xc, 0x30, 0x24, 0x60, 0x6c, 0x60, 0x3, 0x36, 0x36, 0x48, 0xb, 0x60, 0xb, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x11}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x6c, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x81, 0x8, 0x1, 0x5de, 0x7, 0x800, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x1, 0x19}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0x59, 0x8000, 0x3, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x30, 0x30, 0x6c, 0x18, 0x6, 0x423a823adf3f6ee6, 0x18, 0x36, 0x9, 0x30, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0xb, 0x24, 0x4, 0x2, 0xb, 0x24, 0x16, 0x12, 0xb, 0x1, 0x48, 0x24, 0x6c, 0xc, 0x18, 0x9, 0x6, 0x30, 0xc, 0x9, 0x0, 0x3, 0xc, 0x2, 0x24, 0x4, 0x2, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x5}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0x5, 0xc, 0x0]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x24040845}, 0x20000030)
openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)

[  151.605948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.617106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.624367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.633469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:45:52 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240))
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:45:52 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, r5, 0x0, 0x0, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})

02:45:52 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
io_cancel(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, 0xffffffffffffffff, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r3}, &(0x7f0000000700))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:45:52 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x24}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd32b, 0x12}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c0c1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

[  152.172595] 
[  152.172921] =====================================
[  152.173655] WARNING: bad unlock balance detected!
[  152.174382] 6.19.0-rc5-next-20260116 #1 Not tainted
[  152.175150] -------------------------------------
[  152.175894] syz-executor.6/4371 is trying to release lock (rcu_read_lock) at:
[  152.176998] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  152.183602] but there are no more locks to release!
[  152.184355] 
[  152.184355] other info that might help us debug this:
[  152.185354] 4 locks held by syz-executor.6/4371:
[  152.186078]  #0: ffff88800f7b63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  152.187451]  #1: ffff88801b376330 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  152.188987]  #2: ffff88800f7c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  152.190367]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  152.191807] 
[  152.191807] stack backtrace:
[  152.192497] CPU: 0 UID: 0 PID: 4371 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  152.192525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  152.192538] Call Trace:
[  152.192546]  <TASK>
[  152.192554]  dump_stack_lvl+0xca/0x120
[  152.192598]  ? __wait_on_freeing_inode+0x105/0x350
[  152.192626]  print_unlock_imbalance_bug+0x118/0x130
[  152.192655]  ? __wait_on_freeing_inode+0x105/0x350
[  152.192683]  lock_release+0x1ee/0x270
[  152.192711]  __wait_on_freeing_inode+0x10a/0x350
[  152.192740]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  152.192770]  ? __pfx_var_wake_function+0x10/0x10
[  152.192804]  ? lock_is_held_type+0x9e/0x120
[  152.192826]  insert_inode_locked+0x25f/0x890
[  152.192859]  __ext4_new_inode+0x223d/0x4cd0
[  152.192891]  ? __pfx___ext4_new_inode+0x10/0x10
[  152.192919]  ? __pfx___dquot_initialize+0x10/0x10
[  152.192953]  ? __pfx_avc_has_perm+0x10/0x10
[  152.192983]  ext4_symlink+0x623/0xb40
[  152.193019]  ? __pfx_ext4_symlink+0x10/0x10
[  152.193050]  ? security_inode_permission+0x72/0xe0
[  152.193075]  vfs_symlink+0x44b/0x840
[  152.193107]  filename_symlinkat+0x158/0x440
[  152.193134]  ? __pfx_filename_symlinkat+0x10/0x10
[  152.193161]  ? strncpy_from_user+0x21b/0x2f0
[  152.193193]  __x64_sys_symlink+0x82/0x110
[  152.193219]  do_syscall_64+0xbf/0x420
[  152.193244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.193268] RIP: 0033:0x7f9084218427
[  152.193285] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  152.193307] RSP: 002b:00007fff0b2a12c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  152.193329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9084218427
[  152.193343] RDX: 00007fff0b2a13a7 RSI: 00007f9084273019 RDI: 00007fff0b2a1390
[  152.193358] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff0b2a1160
[  152.193371] R10: 00007fff0b2a1017 R11: 0000000000000202 R12: 0000000000000001
[  152.193385] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff0b2a1390
[  152.193405]  </TASK>
[  152.223248] ------------[ cut here ]------------
[  152.224095] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/4371
[  152.225886] Modules linked in:
[  152.226469] CPU: 0 UID: 0 PID: 4371 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  152.228143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  152.229519] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  152.230526] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  152.233457] RSP: 0018:ffff88804256f9a0 EFLAGS: 00010286
[  152.234385] RAX: 00000000ffffffff RBX: ffff888015f2b700 RCX: ffffffff815660f7
[  152.235604] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888015f2bafc
[  152.236811] RBP: ffff888015f2b700 R08: 0000000000000000 R09: fffffbfff0ba7040
[  152.238022] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015f2b700
[  152.239248] R13: 0000000000000001 R14: ffffffff85c10ee0 R15: ffff888025122938
[  152.240439] FS:  0000555570080400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  152.241758] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.242660] CR2: 00007f9084298546 CR3: 000000000de2e000 CR4: 0000000000350ef0
[  152.243936] Call Trace:
[  152.244413]  <TASK>
[  152.245878]  __wait_on_freeing_inode+0x10f/0x350
[  152.247294]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  152.249534]  ? __pfx_var_wake_function+0x10/0x10
[  152.252186]  ? lock_is_held_type+0x9e/0x120
[  152.254512]  insert_inode_locked+0x25f/0x890
[  152.261414]  __ext4_new_inode+0x223d/0x4cd0
[  152.266853]  ? __pfx___ext4_new_inode+0x10/0x10
[  152.269414]  ? __pfx___dquot_initialize+0x10/0x10
[  152.271038]  ? __pfx_avc_has_perm+0x10/0x10
[  152.274761]  ext4_symlink+0x623/0xb40
[  152.279355]  ? __pfx_ext4_symlink+0x10/0x10
[  152.281419]  ? security_inode_permission+0x72/0xe0
[  152.284829]  vfs_symlink+0x44b/0x840
[  152.287405]  filename_symlinkat+0x158/0x440
[  152.289794]  ? __pfx_filename_symlinkat+0x10/0x10
[  152.291356]  ? strncpy_from_user+0x21b/0x2f0
[  152.295471]  __x64_sys_symlink+0x82/0x110
[  152.297064]  do_syscall_64+0xbf/0x420
[  152.298810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.299903] RIP: 0033:0x7f9084218427
[  152.300618] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  152.303490] RSP: 002b:00007fff0b2a12c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  152.304806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9084218427
[  152.305982] RDX: 00007fff0b2a13a7 RSI: 00007f9084273019 RDI: 00007fff0b2a1390
[  152.307155] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff0b2a1160
[  152.308344] R10: 00007fff0b2a1017 R11: 0000000000000202 R12: 0000000000000001
[  152.309525] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff0b2a1390
[  152.314961]  </TASK>
[  152.315351] irq event stamp: 479
[  152.315961] hardirqs last  enabled at (479): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  152.317792] hardirqs last disabled at (478): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  152.319469] softirqs last  enabled at (472): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  152.320959] softirqs last disabled at (470): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  152.322547] ---[ end trace 0000000000000000 ]---
02:45:53 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140))
r4 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)

02:45:53 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0))
openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)

02:45:53 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240))
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:46:01 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, r4, 0x0, 0x0, 0x0, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})

02:46:01 executing program 4:
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc8, &(0x7f0000000000)={[{0xc3, 0x4e00, "e305340b0460279484698cdbec0e03d708ebac1d2c0bbcd0c8ec79867b5b752bf4c19dcb142591168bc1d490b54d57b0c13fe9b30ad24ddb963268e5fee4b0345be9b742b41a74c6780e82c68c62d46a76fb1676632583e8a359e70bf7e3ddbc41f64e1d4ea53e572a48e4eb09f846fee87d74783fbb2977ac0133002162141c263e7130463e0123e6fa7f31d556960c74abe5e8f25c4cfc7d8b0eac0382742c7680cdbc1a7de5074bf4c5dd16063fb5d19cb0d7d341e29e283ad2330d1acc9574163d"}]})
io_setup(0x1, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_pgetevents(r0, 0xfffffffffffffffc, 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x80fe6ad]}, 0x8})
pselect6(0x40, &(0x7f0000000340)={0x2, 0x3, 0x4bd3ef29, 0x0, 0x8001, 0x1, 0x9, 0x34d}, &(0x7f0000000380)={0x0, 0x55a, 0x0, 0x460, 0x7fffffff, 0xffff, 0x9bb, 0x3}, &(0x7f00000003c0)={0x7, 0x8001, 0x5, 0x1, 0x4, 0x1000, 0x5, 0x70}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x401]}, 0x8})
io_setup(0x0, &(0x7f00000004c0)=<r1=>0x0)
io_pgetevents(r1, 0x6, 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x100]}, 0x8})
r2 = epoll_create(0x7fff)
epoll_pwait(r2, &(0x7f0000000640)=[{}, {}], 0x2, 0x20, &(0x7f0000000680)={[0xf8d3]}, 0x8)
io_setup(0x200, &(0x7f00000006c0)=<r3=>0x0)
io_pgetevents(r3, 0xffffffffffff91d9, 0xa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x162001, 0x0)
io_cancel(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000840)="d797cf", 0x3, 0x3, 0x0, 0x1, r4}, &(0x7f0000000900))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0)
io_submit(r1, 0x5, &(0x7f0000002040)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000001c00)="07b09f38e711797bc958d9f092b64f1f558b7eb77fc1cd68f2947a73957d9b9da7228dbd19cbb5", 0x27, 0x2, 0x0, 0x2, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x3, 0xff, r4, &(0x7f0000001c80)="5fd972904ef631b23f45af35ebb1d85b627a6ab23f8a99ac5fd33d13e3e3812477e0ee4794831434c443ee62d70b28669872b6ed54c7d0818d5757ecd41d5500a6639ec40cf9ef4df89c75e57a2dbb5733c0a0d1c382a579789344250ef58a48cdd91cf6f68a3f03017b843b23a3e80a185ea1f710c1", 0x76, 0x10001, 0x0, 0x1, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x1, 0x1b, r2, &(0x7f0000001d80)="9824eb26905ef1735aaaeeae638f8bb10cddde502fcee00fa18c8fdaaf5f8abf1ca305de4b97750ca0aa31469c3d82a31e271754ace947b0ff51b495dd5f76b45056b27ed90a2495d71ae64af4a6b2f1a8c440e55e51edbf9cd9904821c24eb733bf6f2936e5541f189178b3a774f437cadbbc269f7a11e78bbb5d21f647a50f25576527d8e37f75eb6b29d7c066bad41ff7115e", 0x94, 0xfffffffffffffffd, 0x0, 0x2, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x8, 0xfd, r4, &(0x7f0000001e80)="8a0d2ef905ce309ee6445403c08efbf857159074", 0x14, 0xa3, 0x0, 0x1, r4}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001f00)="0318e1429a0f2e74c75c877742218935a0fe9333bc9702abc34b9bd0eca762de38ae7b005f79d09189fe843da61861cf730067d3f3baee8410e19ef28293b79c77646dcb061b541f84edf8af51f39211cb66e745245dcaeaa9a82ce46ccedca30c66028df884eb0ac3eb1a28a7c675bf498b70d2d69853451b99096fab5f5858c4469d9ea5a58713ea44727475f37e04efc33a1f63db0d71ecbb53f38ec95cb584005de0c804d83cc06c4f0afb786214982c2e097ee5b9c7785b4dd0463095bf597a909849753cb457838c8c6f3f18f37ef7f80b31a5daf415c422fa781847aff1d304807b29e68e00aae49b95", 0xed, 0x5, 0x0, 0x3, r4}])
syz_io_uring_setup(0x33c1, &(0x7f0000002080)={0x0, 0xa611, 0x8, 0x1, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002100), &(0x7f0000002140))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r4)
pselect6(0x40, &(0x7f00000021c0)={0x5, 0x5, 0xd2, 0x0, 0xfffffffffffffff9, 0x8, 0x100000001, 0x8}, &(0x7f0000002200)={0x2, 0x7f, 0x9, 0xa790, 0x7, 0x3, 0x0, 0x49b}, &(0x7f0000002240)={0x0, 0x4, 0x8, 0x1, 0x1000, 0x1, 0x4, 0x72}, &(0x7f00000022c0), &(0x7f0000002340)={&(0x7f0000002300)={[0x1]}, 0x8})

02:46:01 executing program 3:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x2, 0x80000, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = epoll_create(0xfffffffc)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000380)={r7, r2, 0x400})
io_setup(0x1, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x58}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x69}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x4885)
r10 = epoll_create(0x1)
epoll_pwait(r10, &(0x7f00000005c0)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000600)={[0x8]}, 0x8)
io_cancel(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x1ac, 0xffffffffffffffff, &(0x7f0000000680)="c2818778ed1ba7146af3825bad35a5f42bd5a848ab81081502d5767944618778b1d9281c7a52a857c95e9fc57044fc27ddd6f7b19c92f8166249ccb251b8", 0x3e, 0x401, 0x0, 0x3, r3}, &(0x7f0000000700))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)

02:46:01 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/239, 0xef}], 0x9, &(0x7f0000000740)=""/236, 0xec}, 0x60)
personality(0x6)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000980)='rxrpc\x00', &(0x7f00000009c0)='^*\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f5c145}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45e28000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x29c, &(0x7f0000000c00)={[{0x19, 0x4e00, "e942bc871c235d13a2defbec3699ab33804887a5df3b1142a7"}, {0xf3, 0x4e00, "431649f0dc6b2e334015399bdf6288379cc47fb573065fb41e46e5a1eb69aea2a0b58fb716cfe63955018e1f9c1dd12be87a55202a294fedce1168da72424f5b3ab419576ce6f13dcb3e8d0250a6bad885b24e6c2a6233a193b21402c81b9a84a5aedb8ff6d956ef3e8b787b0c75f3338af8c4885df65bd76d98358c7202254bf6128a127d73561f6654874fe01a2c00ce3678675807c36e66eb561b7bc2873fcbcc7587f2abce03ec3ec61f73b78b1f5da2e92d39f50a5577969f51b14b899f0fd8af9947ed8a401ce7f7262a5e328b4602ec21a50048601b9e71ba8e6545dbf07614d1766719cef52a751b596470abff2201"}, {0x8d, 0x4e00, "6ef3de694e0a632e6b37c31d1b80e5d131e4040fb01d5b7c6019d2d1c890d958e1f2c88c1e04ee4e274efe89558789febe8d0fad9a873119cef60f84f4a703b145f7c2946dbe0b5f7949ad98cb7c3adfab45224ca159355fd3a7ef155491535be349da4f03ac442d8f72a0bd3b56e1982613ccd624037392178ed5983d3acc18e27f3249638a2e9fb828dd07ea"}, {0x8, 0x4e00, "90d51e8ccae12609"}, {0xde, 0x4e00, "dfe81641f33f50732779e4b4c0524e4c29fdf5899eb0e9f3d2ffaec5ad31c7915df7cd89f2b7163d199a38739d1b79a02758e8ca993c1ac079ca85a0e9712400d8c67d929770de96e6ea5bb0a2003854ce83647581098c2575326bf39f7a4a6d0bd2bd2c9d55e565895d811e3804c523feb32e89178fb6cd8fd419a36f3283ff7a1b424c48033197182a34de32f829dc6b562089437aa80e92189667a4625250d56bc70e0b34c9c9d36cdf282c86c80282afa62cfac1edf3017edeb8cad1ad3e7535e43277afba2733ea0287b39cdcd6c6eb065f456dbe8a178aef899e8b"}]})
r2 = socket(0x2, 0x5, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r3, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x5}, {0xc, 0x1}, {0x6}, {0xb, 0x1}, {0x9}, {0x12}, {0x6}, {0x12, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2356, 0x7]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd4, 0xbe, "f16fadb6072232c8972cc6e2dce0829ce297c897544386ea38ae82d1a81e882fe0d16bcce81bf93de5019250641848e19e2b429a1fe22ffcf6a897b496389e4fb153a4a9f477ecb3f6b45065ecc5ef87760788cc9bede0bed24f3e23322ba59693c1b042f2e3e2a1951f7cddd397ea7477030f8ff7681b6cf2864f6e2e83f5446f1b01f665b6e4a06ca9e1ea06258fef25e96c8ab5365a8ddb37ad40e07631cb109f76bbb0df8e61b849db9df0b5e4cc510263c889c4753a52326311cd47f4890aae9a01fe344ecf44624a26588dc6cd"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
personality(0x800000)
r4 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "cc26da16370ef023dba156826ca0d46ae9f27f31c5e7264019e7cf5908a9e8ecdc0be838d555bfb5eb0f3c1b9ff8b70044df996849e0fac96020cd180c0b684d", 0x38}, 0x48, 0xfffffffffffffff8)
keyctl$negate(0xd, r4, 0x2, r0)
personality(0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2)

02:46:01 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)

02:46:01 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240))
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:46:01 executing program 5:
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x5, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f630c54fc4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xe57621b92cf9a6ed}, 0x4000004)
socketpair(0x18, 0x80000, 0x6, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
timer_getoverrun(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x4008004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040880)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000480}, 0x1)
socketpair(0x3, 0x800, 0x3, &(0x7f00000008c0))
openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0400, 0x0)

02:46:01 executing program 0:
r0 = socket(0xa, 0x6, 0x1f)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000080)={0xa28, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd68a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x418, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0xff, 0x1, 0x81, 0x5, 0xfc01, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x2, 0x1b, 0x3, 0x18, 0x36, 0xc, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x5}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x1}, {0x7, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x3, 0x5, 0x1e, 0x12, 0x36, 0x1, 0x60, 0x3, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x36, 0x2, 0x36, 0x4, 0x16, 0x6, 0x1b, 0x36, 0x9, 0x49, 0x36, 0x36, 0x30, 0x6c, 0x4, 0x24, 0xb, 0xb, 0x1, 0x3, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x60, 0x65, 0x1, 0x1b, 0x30, 0x36, 0x1b, 0x16, 0xc, 0x1, 0x2, 0x1, 0x5, 0x3, 0xc, 0xb, 0x36, 0x4, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x2, 0x6c, 0x6c, 0x30, 0x18, 0x6, 0x3, 0x4, 0x27, 0x30, 0x9, 0x16, 0x9, 0x1, 0x1b, 0x48, 0x16, 0x1, 0x6c, 0x3, 0x6, 0x36, 0x13, 0xb, 0x6, 0xb, 0x24, 0x1b, 0x24, 0x1b, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x26e, 0xfffd, 0x1f, 0x0, 0xd692, 0x0, 0x800]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x4}, {0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5}, {0x3, 0xa}, {0x1}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xc}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8, 0x90, 0x9, 0x8, 0x7fff, 0x3, 0xb1, 0x90]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x1, 0x2, 0x2, 0x60, 0x12, 0x5, 0x5, 0x4, 0x6, 0x36, 0x2, 0x12, 0x48]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x30, 0x16, 0x30, 0x9, 0x4, 0x9, 0x1, 0x16, 0x24, 0x1, 0x9, 0xb, 0x1, 0x18, 0xc, 0x5, 0x48, 0x6, 0x3, 0x24, 0x4, 0xb, 0x60, 0x12, 0x13, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x40, 0x2, 0x401, 0xfffc, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x5, 0x13, 0x36, 0x6c, 0xb, 0x7d, 0xf, 0x6, 0x36, 0x48, 0x1b, 0x60, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xb, 0x6c, 0x9, 0x5, 0x6c, 0x6c, 0xc, 0x16, 0x9, 0x2, 0x6, 0x5, 0x0, 0x36, 0x5, 0x1b, 0x5, 0x36, 0x60, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x2, 0x6, 0x2, 0x5, 0x6, 0x2e, 0x60, 0x48]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x12, 0x12, 0x45, 0x12, 0x6c, 0x1b, 0xb, 0x1b, 0x48, 0x6, 0x36, 0x2, 0x30, 0x60, 0x5b, 0xc, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x60, 0x16, 0x6, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x3}, {}, {0x1}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x3, 0xa}, {0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x9, 0x30, 0x60, 0x60, 0x9, 0x2, 0x6c, 0x5, 0x0, 0xbfd18323e6873fdb, 0x36, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x36, 0x0, 0x9, 0x4, 0x5, 0x36, 0x6, 0xc, 0xc, 0x9, 0x24, 0x30, 0x48, 0x18, 0x6, 0x37, 0x9, 0x32, 0x2, 0x1, 0x4, 0x36]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x101, 0x7, 0x101, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9b, 0x9, 0x8, 0x2, 0x1ff, 0x971]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x18, 0x6c, 0xb, 0xb, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x101, 0x83, 0x6, 0x70de, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7, 0x3, 0x0, 0x5, 0x5, 0x8a9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff72, 0x3ff, 0x5be5, 0x2, 0xfff, 0xe0d9, 0x3ff, 0x832]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x1f}, {0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x7, 0x1}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x1b, 0xb, 0x9, 0x12, 0x1b, 0x1b, 0x30, 0xb, 0xc, 0x1b, 0x9, 0x1, 0x2, 0x60, 0x36, 0x3, 0x30, 0x72, 0x16, 0x6e, 0x24, 0x66, 0x12, 0x30, 0x6c, 0x6, 0x36, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0xc, 0x2, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xb5e6, 0x8, 0x7ff, 0x5, 0xa0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x20, 0x2b, 0x8, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0xc, 0x0, 0x6c, 0x2, 0x36, 0x0, 0xb, 0x12, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x3, 0x1, 0x4, 0x10e, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x36, 0x16, 0x48, 0x1b, 0x1, 0x30, 0xb, 0x24, 0x33, 0x36, 0x2, 0x24a77ebffeea7c0a, 0x30, 0x36, 0x5, 0x6c, 0x3, 0x4, 0x2, 0xb, 0x7a, 0x36, 0x30, 0x30, 0x36, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x2}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x13, 0x36, 0x48, 0x1b, 0xb48b5993fed18414, 0x6c, 0x9, 0x24, 0x18, 0x18, 0x68, 0x1b, 0x60, 0x60, 0x6, 0x18, 0xb, 0x3, 0x9, 0x1, 0x16, 0x9, 0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0x5, 0x1b, 0x39, 0x6c, 0x48, 0x4, 0x1, 0x4b, 0x2, 0x60, 0x16, 0x18, 0x24, 0x36, 0x6, 0x24, 0x5, 0xc]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x3, 0x5, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x16, 0x30, 0x18, 0x30, 0x6, 0x48, 0x16]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x80, 0x2, 0x4, 0x80, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffc, 0xfffd, 0x3, 0xcb, 0x1, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x2c, 0x9b9b, 0x20, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x83f9, 0x9, 0x800, 0xff5d, 0x2, 0xd8d5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x0, 0x2, 0x3f, 0x3]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x9, 0x6c, 0x4, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}]}]}]}, 0xa28}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000045)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x30c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x20, 0x1}, {0x9, 0xc0, 0x7f, 0x1f}, {0x2, 0x3, 0x0, 0x5}, {0x80, 0x63, 0xff, 0x80000001}, {0x200, 0x0, 0xfe, 0xff}, {0x5, 0x47, 0x81, 0x1904}, {0x7fff, 0x7, 0x8, 0x1}, {0x4, 0x6, 0x20, 0x929}, {0xaab, 0x20, 0x2, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x60800}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f0000000f40), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x893}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r2 = epoll_create1(0x80000)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
shmctl$SHM_UNLOCK(0x0, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff)
socketpair(0x2, 0x1, 0x1, &(0x7f0000001100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140))
r4 = syz_open_dev$sg(&(0x7f00000012c0), 0x1, 0x101200)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)

[  160.454593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.460193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.469567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.475942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
02:46:01 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:46:01 executing program 7:
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
r0 = shmget(0x0, 0xe000, 0x200, &(0x7f0000ff1000/0xe000)=nil)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
io_setup(0x3ff, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00'})
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ff4000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00'})
shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x125, 0x2}, 0x1, 0x2, 0x9, 0x401, 0x0, 0xffffffffffffffff, 0xd763})

02:46:01 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait2(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8)
r1 = epoll_create(0x200)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x50000008})
r3 = getpgrp(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4aa000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000180)={r5, r0, 0x1})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000001c0))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe31}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x9, 0x0, 0x8001}, {0x1, 0x20, 0x6, 0xfffff001}, {0x100, 0x7, 0x2, 0x6be}, {0x3, 0xa9, 0x5, 0x2}, {0xff, 0xc, 0x52}, {0x9, 0x3f, 0x0, 0x3}, {0x9, 0x4, 0x2, 0x4}, {0x20, 0x7, 0x5, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40)

02:46:01 executing program 6:
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x103, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c70e8da33"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8b, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x656}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x18)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r3 = socket(0x23, 0x80804, 0x5)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}, [""]}, 0x24}}, 0x80)
openat$sr(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)


VM DIAGNOSIS:
02:45:53  Registers:
info registers vcpu 0
RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804256f4a8
R8 =0000000000000000 R9 =ffffed10014de046 R10=000000000000005d R11=6666666666663c5b
R12=000000000000005d R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555570080400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9084298546 CR3=000000000de2e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a81fb10
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003503f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a81fb48
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555578247400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc46d8c268 CR3=000000000da98000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=372f6b636f6c622f7665642f7379732f XMM01=00333a372f6b636f6c622f7665642f73
XMM02=00ff0000000000000000000000000000 XMM03=696e656420737365636341002f737973
XMM04=00005653621dcd6000005653621dcd40 XMM05=00000000000000000000000000000000
XMM06=00005653621dc5000000000000000000 XMM07=00000000000000000000000000000000
XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000