Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:12206' (ECDSA) to the list of known hosts. 2022/10/02 08:10:48 fuzzer started 2022/10/02 08:10:49 dialing manager at localhost:35095 syzkaller login: [ 37.142548] cgroup: Unknown subsys name 'net' [ 37.215331] cgroup: Unknown subsys name 'rlimit' 2022/10/02 08:11:03 syscalls: 235 2022/10/02 08:11:03 code coverage: enabled 2022/10/02 08:11:03 comparison tracing: enabled 2022/10/02 08:11:03 extra coverage: enabled 2022/10/02 08:11:03 setuid sandbox: enabled 2022/10/02 08:11:03 namespace sandbox: enabled 2022/10/02 08:11:03 Android sandbox: enabled 2022/10/02 08:11:03 fault injection: enabled 2022/10/02 08:11:03 leak checking: enabled 2022/10/02 08:11:03 net packet injection: enabled 2022/10/02 08:11:03 net device setup: enabled 2022/10/02 08:11:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 08:11:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 08:11:03 USB emulation: enabled 2022/10/02 08:11:03 hci packet injection: enabled 2022/10/02 08:11:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 08:11:03 802.15.4 emulation: enabled 2022/10/02 08:11:03 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 08:11:04 starting 8 fuzzer processes 08:11:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) r8 = syz_open_dev$vcsu(&(0x7f0000000c00), 0x4, 0x200080) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3}) pipe(&(0x7f0000000cc0)) 08:11:04 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff5000/0x1000)=nil) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002840)={{0x1, r5, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:11:04 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001a80)='./file0\x00', 0x8000, &(0x7f0000001b00)={0x75, 0x86, 0x180000, {r6}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xc0, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3ea1545329c7f6eccfece05a8fce7b11"}, @NL80211_ATTR_PMK={0x14, 0xfe, "252699e2e06ef8bf60708d6e9ac6f7a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6edb37ade1e0207a98322a78bf5a7d96"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fecac945a514a5fed84d9a66c9df946b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3c16be46ea0936d8b480b3fcdca5eb24"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "73c65b068561e9bc6355937bb2f287ac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e32714e2dcf37936f392164879132699"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x4008005) [ 52.449248] audit: type=1400 audit(1664698264.778:6): avc: denied { execmem } for pid=284 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:11:04 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) 08:11:04 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="6270dc39e458a81bb9573d62bc346062e1fe62a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="ccf48503e721a2db69f3ffb8fa7e7e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801d) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x973}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 08:11:04 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xf97e, 0xffffffffffffffff, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000a00), 0xc71, 0x9) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:11:04 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a80)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001200)={0x830, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x46c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x36, 0x16, 0x5, 0x12, 0x6, 0x5, 0xc, 0x30, 0x18, 0x18, 0x6, 0xb, 0x16, 0x32, 0x918a05721aa506fc, 0x36, 0x6, 0x1, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x23, 0x3, 0x3ff, 0x8000, 0x0, 0xdd, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4b6, 0x2, 0x101, 0x0, 0x62, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xcfc1, 0xe8bb, 0xff00, 0xfff, 0x0, 0x401, 0x1f]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0x8, 0x7, 0x400, 0x8001, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x0, 0x48, 0x18, 0x60, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x4}, {0x1, 0x16}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x16, 0x0, 0x1, 0x9, 0x6, 0x2, 0x30, 0x30, 0x6a, 0x18, 0x1b, 0x30, 0x6, 0x6, 0x12, 0x3, 0xb, 0xc, 0x3, 0x6, 0xb, 0x6, 0xb, 0x18, 0x16, 0x16, 0x3, 0x4, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6, 0x2, 0xd1, 0x2, 0x9, 0x16, 0x1d, 0x9, 0x24, 0x12, 0x43]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x6c, 0x4, 0x5, 0x6, 0x6, 0x30, 0x12, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x154, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x18, 0x48, 0x60, 0x30, 0x0, 0xc, 0xb, 0x2a, 0x5, 0x16, 0x36, 0x48, 0x60, 0x18, 0x11, 0x18, 0x12, 0xc, 0x60, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x6, 0xc}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x8, 0x7, 0x7, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x1}, {0x7, 0x7}, {0x6, 0x1f}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0x1, 0x1b, 0x6c, 0x6, 0x24, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {}, {0x2}, {0x3, 0x2}, {0x4}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15, 0x8, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x24, 0x3, 0x1, 0x8, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368d, 0x0, 0x5, 0x9, 0x400, 0x0, 0xe4, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x30, 0xfb0b26468c95ab8b, 0x1, 0x6c, 0x16, 0x3, 0xb, 0x36, 0x1b, 0x4c, 0x48, 0x5, 0x5, 0x30, 0x60, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x18, 0x16, 0x6c, 0xc, 0x24, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x57, 0x1, 0x60, 0x1b, 0x4, 0x3, 0x4, 0x24, 0x0, 0x6, 0x12, 0x79, 0x3, 0xb, 0x9, 0xc, 0x6, 0x48, 0xc, 0x2, 0xc, 0x1, 0x16, 0x12, 0x1, 0x12, 0x18, 0x16, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x6c, 0x6, 0x1a, 0x1b, 0x16, 0x3, 0x1b, 0x1e, 0x18, 0x24, 0x24, 0x12, 0x16, 0xc, 0x30, 0x16, 0x12, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x8, 0x200, 0x3, 0xe5, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccf8, 0x7fff, 0x7fff, 0x7b4, 0x0, 0x800, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0xff, 0x1, 0xf93, 0x2, 0xef, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeef6, 0x3, 0x1, 0x2, 0x0, 0x200, 0x4, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x56d, 0x3, 0x0, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x6, 0x3, 0x2, 0x5, 0x2, 0xc, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x800, 0x7ff, 0x401, 0x100, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x1000, 0x2, 0xc4, 0x8, 0x9, 0x13]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x1, 0xb, 0x16, 0x6, 0xc, 0x36, 0x6, 0x2, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x24, 0xb, 0x6, 0x1, 0x12, 0x36, 0x7064ae162a8bd345, 0x12, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x18, 0x6, 0x5, 0x9, 0x18, 0x36, 0x16, 0x7b, 0x6, 0x60, 0x36, 0x1, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x7, 0x1, 0x9, 0xc3f8, 0x7, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe23}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x3, 0x24, 0x16, 0x1, 0x4, 0xc, 0x0, 0x6, 0x9, 0x48, 0x9, 0x60, 0x2, 0x5, 0x1b, 0x2, 0x60, 0x18, 0x20, 0x5, 0x6, 0x1b, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x830}, 0x1, 0x0, 0x0, 0x9aaac3efffc73303}, 0xc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000001b00)={{0x0, 0x0, 0x80000001, 0x3, 0x7df6cdd9}, 0x10001, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x95, 0x2, 0x1}) 08:11:04 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x194, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_IE={0x16c, 0x2a, [@perr={0x84, 0xd5, {0x0, 0xd, [@not_ext={{}, @broadcast, 0x400, "", 0x41}, @not_ext={{}, @device_a, 0x10000, "", 0x24}, @not_ext={{}, @broadcast, 0x1ff, "", 0x42}, @ext={{}, @device_b, 0x3, @device_a, 0x9}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @ext={{}, @device_b, 0x1ff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x7, @device_b, 0xf}, @not_ext={{}, @broadcast, 0xbf, "", 0x34}, @ext={{}, @device_b, 0x7, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x3f, @device_a, 0x7}, @ext={{}, @device_a, 0x40, @device_b, 0x37}, @ext={{}, @device_b, 0x1, @broadcast, 0x38}]}}, @perr={0x84, 0x8f, {0x0, 0x9, [@not_ext={{}, @device_b, 0x3, "", 0x34}, @ext={{}, @device_a, 0x5, @broadcast, 0x42}, @ext={{}, @device_a, 0x40, @broadcast, 0x1}, @not_ext={{}, @device_b, 0x6, "", 0x20}, @not_ext={{}, @device_b, 0x5, "", 0x24}, @ext={{}, @device_a, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_b, 0x9, "", 0x11}, @not_ext={{}, @device_a, 0x4, "", 0x3f}, @ext={{}, @device_a, 0x40, @device_b, 0x27}]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) [ 53.663922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.667717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.672390] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.674194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.677802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.679676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.681172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.693913] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.705612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.714173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.715508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.717959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.719722] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.720983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.725444] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.741302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.743159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.746630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.752194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.753678] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.758236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.763478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.765227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.781703] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.781828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.794968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.796850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.802713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 53.804565] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.846395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 53.848107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 53.851463] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 53.853009] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 53.854350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 53.858838] Bluetooth: hci6: HCI_REQ-0x0c1a [ 53.883633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.885440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.886988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.890686] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.892733] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.894286] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.899009] Bluetooth: hci7: HCI_REQ-0x0c1a [ 53.959249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.961944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.969885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.988360] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.003342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.012905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.031901] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.743754] Bluetooth: hci3: command 0x0409 tx timeout [ 55.744342] Bluetooth: hci1: command 0x0409 tx timeout [ 55.807178] Bluetooth: hci0: command 0x0409 tx timeout [ 55.807677] Bluetooth: hci2: command 0x0409 tx timeout [ 55.808476] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 55.871121] Bluetooth: hci6: command 0x0409 tx timeout [ 55.935140] Bluetooth: hci7: command 0x0409 tx timeout [ 56.063921] Bluetooth: hci5: command 0x0409 tx timeout [ 57.791515] Bluetooth: hci1: command 0x041b tx timeout [ 57.791970] Bluetooth: hci3: command 0x041b tx timeout [ 57.855103] Bluetooth: hci2: command 0x041b tx timeout [ 57.855527] Bluetooth: hci0: command 0x041b tx timeout [ 57.919114] Bluetooth: hci6: command 0x041b tx timeout [ 57.983149] Bluetooth: hci7: command 0x041b tx timeout [ 58.111123] Bluetooth: hci5: command 0x041b tx timeout [ 58.386651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.401311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.402985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.412756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.418215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.420296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.432936] Bluetooth: hci4: HCI_REQ-0x0c1a [ 59.839210] Bluetooth: hci3: command 0x040f tx timeout [ 59.839621] Bluetooth: hci1: command 0x040f tx timeout [ 59.903139] Bluetooth: hci0: command 0x040f tx timeout [ 59.903557] Bluetooth: hci2: command 0x040f tx timeout [ 59.967193] Bluetooth: hci6: command 0x040f tx timeout [ 60.031137] Bluetooth: hci7: command 0x040f tx timeout [ 60.159111] Bluetooth: hci5: command 0x040f tx timeout [ 60.479133] Bluetooth: hci4: command 0x0409 tx timeout [ 61.887119] Bluetooth: hci1: command 0x0419 tx timeout [ 61.887556] Bluetooth: hci3: command 0x0419 tx timeout [ 61.951117] Bluetooth: hci2: command 0x0419 tx timeout [ 61.951571] Bluetooth: hci0: command 0x0419 tx timeout [ 62.015108] Bluetooth: hci6: command 0x0419 tx timeout [ 62.079160] Bluetooth: hci7: command 0x0419 tx timeout [ 62.207118] Bluetooth: hci5: command 0x0419 tx timeout [ 62.527165] Bluetooth: hci4: command 0x041b tx timeout [ 64.575152] Bluetooth: hci4: command 0x040f tx timeout [ 66.623160] Bluetooth: hci4: command 0x0419 tx timeout 08:11:56 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xf97e, 0xffffffffffffffff, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000a00), 0xc71, 0x9) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:11:57 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xf97e, 0xffffffffffffffff, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000a00), 0xc71, 0x9) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:11:57 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "647d1bd8d96dde526598d1d6674816d0fde6655be73d4391a7e493e4fa184a5e7ce2af0842bc351996bf042ea192dc195c88e27c262b66009c15328b4b4ce53ff243c1776ee71cf33bbe2180c99a21bb3a70b6142e7d0f1fc7bf9b6c13b19edfe9a8f5f26fb10f3a048f6765b584e137f53b2ed908174385b2f931e30bcc81ac85b83274759216fa0a89f55dff1a07b7f1ee0d7964d5d8289e92b5b55d57fad271eccfe7a36828dd5281b7d4b99819c0986eba516b7fb9c2a22d00f1261e33580ff273e361c8d3b1e36758b6d61e4931347feef7da7633b02e5583753e7f50c812bc93aaa20c12d8778d02738bf5908f82dadacb3641ca6f482dae3e8c9107abbb573623035893c1247c20afcab019504fa95f53cb0b19fe80b825ddacf35c6666be1cd1c69452864b3e3cc29fc9d04fe1e97201321bfbacfa54f0eed1521a03470f37f8d928cb2f6a0074a97915b408407e6cbc15fd7130d06134f47a86039acede539da353d3e90b27708f07e0f1d8bb12e7b98e2972c87f170937a90801f5772ec24c012b9598c3036b6a18b41dc8e1d5272ffeae47a2a500d505e8d2c26f1bf65ee44c0da91f9c7e509aa73cf12dfaabf889c7004480a6266209158f142716395bc1b61a5fe0b0d259f5ae1e56f83f6082c8d9aebc6c75655fed48de8f30bccf574abf8789a9120a00ed0e8a6a7ecbbaba8cdb03cbabbce8ba0da010e495e963dd1a5d096491c8d7e17e15aaa6810b1c3df7f0a51d3b2ed7d669bc68b3af91d1bfd3536e2a82f818161c3b590b1a1a3ab74943dfa01948a2095589787732ec3925b5364886b1bfb516ea38c1d7f69118e1548082765ff52cca9a6b578e19865b56452af34fd6c9a2389b3d90560080333a3adbe7e47acd9e0b6ba7513e6dbb6a1a2975c34309878346aac986225d7d59aae977672c32adf58eb6b7fdf3100ca34c96171aa28260c7809f9f0a8efce0d10b8d615b2d71df37ea634c461bdad6ef9e683bd73b480f0e8b178ef7c70a63441263d9faa012dae2b565c130cadcb071d4f85befa9c6f66ac35f085096801fc948bb1f97b0273bc7bf5d45095ddb6b9ba15df404e11d2c73bd73a5bad17d04a3b4499a17cc07bfc8c8079c4802b5747eff9fbfc35600a2878ead88059ae82f7fc9994a871e58d77c8d559b8b211ed7ade55a5555b718a64a16954a1a08fa0cc6045bf601b8cede6df4a37c3f6c924ec83be5ac13449bdb15dc944b85a8dec2e6af225043f2cf8fee80e48f9af7bdbe9d0501cf2d6e30b80a61aa3478a120572d6c4d4571703d5d777218fde489696cb452841242969732229e08cc6b06338e78606293884a72e495bcfa25a2a45cdb336fafe0344539984fc7f2443d1ed7ecbda82c91ae9fbb60184534208fec3e382591138e6f936315454ccd19dff8acb2d8a1d3a6a3914ec7cc70ab31cabfb1777ead95c9c9b74ca68b62679a363757876424695e388588438f7dd302bae1e7b65f656b63faf77dd918be7726f3414216f647d94d7b30cb660274d68b173656b787ca8821d3303163d86a9cdf060aecd89139c15e210174016057b6a62fb0f15ee9e162655a9280a5bfeb094e22c177ae8bbf2c8ac94f7272b27e99fdfe3539af81b902907bc5eae8a60abb3d9bb511f775e648e17047b6d2c25fea23acaa8d597de2a396cc2330f37462aadad4db1b814e08d20789a28cc3fcbc0a5f5b858d8ee5be8a55e35f13151d31f98b7ca2248f156e4a96c4af12d7a4bb6f4382abd94207e61ef0d5b8263fa7c30fba43ed6998e20f097bbaa14058a4fc03cb0cf0044ffe6fb8ed4926f215476b0fb5bfc79f83820b0ff1f73a968490efaeadb5110d4726cc604099819496cea60bcac9c4442cc9c23e65030cd15f8e7e80a7f1d0f2b4eaeea3c8f642273629617c262298551f0042ea20d1fb6cf92236afa63de175877aef2ec53f3e2de7bed3fd7177acb49512337b79326252496ec7885151d835f6ae2b7eefe1caf2f9005f069f97e665b9781b038aafd49d6776fba6465fb98cbfdcd03c9e9989ed00e857aa052ba6b7535dd9d9a44e9a019de718deea466629e3bd34b5e64b247ea1a0910790083947733d080fcd47b3ee029501c093823960c195163d7804f5671c384eefe7e5a20207af552c906113159eb1bfc0f444ac5a1eea67214c1251d463f7acc86fd23f7e7caf61024138bb0b88d14291b15a1ca2d2f231eb433630d3e64b8233eccc8cfecaef525e0edf55e1addc03c79bb707fc6abddc51adf9662117ab5c975f9f9d82ca55bd95465a4509f3a6d49346e5d310d4cc950cb3d71ea1f75b8ad0e6dd9469d9ace34d664ac882bc6591d6b8525f6313fa7e977671af3b6b07e6ee7c9393ee2c3e8878fa20ad30f56dd6eb1ed5ed9eec84013cd7bae03876d113dbad514c921ef89d2e5d9f0d8a4d579ffedab51d05a135c03e3437cf40c189f16601acbe15b5a2e9bf7f36bd9630203a8e06c542e8c92d40998a92329b950d503f5b499431d6a7ddf7aebfbac7297c23729b9272fc80e952ebf8b392068a005c9a95cf5f2da927bd6eaaee9e15d01f010c24f45fce643b39b6e5a04cd128b9cbcd0e547eabb8413cc8b0f3490777a1bac6b697a6ce05b10e4333c705948870ecbe0a8821a0df79c6580c4f3abfc513af27a34fa4ec803a0dabde6d4c5b505fb68a530e855692dfdb8703ee6ea232e70a3886f7eadc8fa50d23e7e7df5f5163705ca07c968b2cd638e49a82420ecae9888ddf4c8547d81ae1506f3c47e45a56eafd0db72b0d9e2e6e210ed226d95aac81b9198fc6d40c0d26636e9cccf448215510758769b217d4b13971968919af891143b7d9e1b5c4e021d9a04a29b7969027d926ed2bfb61e431ca485f30991291b4979f15d5530ea7e47b9037acbaaf8127299e4249c65959c2f73a93b52feea2df46e1fcf842ebdddca4b9cf6c40b6622792145d3bd20c6c4a06fe998f4e662a795f5048b44041cf7eb5cca55a6640c691a2ab599aad7d5bde9fa546dda3454831e002b7e23f8a469b126a5e239db672dc1ff9e3ce219ce23c4ee49a78d52d93f167e56fb05849c4cb1fbe33c255edb51af60412f6b5cce2041c023cc98d3b542b0c13a87901480928e6dd01a35aba2680e82d7cce509d96b028aab4453b8a2fea31e3e1c7ffda343b22f92c741e35e57d6796aef8a080f05a8dae371e895adaf70d62d4ea7dac956b27ab20d1f42095788ed64bc70ef34c581bfa4d7b1e256d7b46af138b1780622108852897a66b256c61e8eba7f44cabd6411a9ec2fa124f7f01debb47ebfb1998f62e09d477b9e009e1f29f11ade5d59c5bdb77659d60f1f02e58574604004c06d5993035245bb76ad5a8e4798be81ec72d74876d84e264392d341e551a96d046d652374d67a4a1e2c6af61e58b6648b546010973f4bcb87f001359b2335cd59822ef306ba18ef861ffbb631b6899868c7b12073a3af7a77cd18dabe1fc67da2537e308d051fe271235943548597a0f61343517c1696e694e2438d1694f8aab428e96f70f969a40b93d3f68385adfb5bc3e1067cea6053f1d035f818a88468d1342748e966fedca37978af95f1654e57906a9ee2e9bdea92357da5b92a028d59dc7574131d5750f6a89fdda212a46ee8430dbab02f253ecdf85f0afbfb401720f44dde7930a1b685ff588486d5fbfac53098cb8228301cb23c0bad455d68d06ae3da6042ffc2d88ca161b8353a7e931164e35c9ca47b5104e09ea7e388732cc9a586421411d050a8dd7707ee4af7359c7806a08673b0a84e8c3c2a8a4d06943ed6f156e492a56e44a945e4f2bbea0a6dc96bc7e7ed2cc0858b14770a45c37183b59216d6d7b01884a282a27585f574579cb7ec0ab169a2f0714ec7774d3a01622cc9258b477dc4b88470706f30631c7fa26290ecc3c298ba89fadefc0811eaad57a71d2bdbc5c203521165637566a4aaa167e3e1bd1c318d64a3f04faa81f7ccb57084d48e8c15e9150d4a8ab2f36d9fe477c9d7dbc045f414d6ac4dafb5e81107d5c50ca37d7d0547634e94f40a45c00be7bfc71ede51375c2c973c51af52bd4fe295dad43197959f90b81e24823e622a88a2122546aa8ce792aa79ad30a0a399b77cc70356c227137f592728433080eb5f6271b546c850b6c93b76ae0c80b4ff6893e7f201c1365da63d45589a5059fc8e67b0baa1b4712a2eba4542c0aa67c76c7f1a2da8937dd0096c0fc8c7bfe45b0e08ff150df3ab57e467f42ef2f9d1ccc02cb2750b77df6b676d103db1b565c23d5064c71305b4c9ca0b93a4fdccae9e95695b05a358b8b6402c8585907ab26e882ac0db464d8f1c3cdf7529f3090828d1e4f8f19f8d64e6b7f875e75b881b0006ec9b7b6520f82c9223ef736da7868943f8b3418fdbe9d80b6a31eb9b11bbf21e42bf6cf76f5d4b4f7be7196ceb89e744c126b5eb71caa00bc298a19ff6f327eec58f98bec3cd033559e210b1ec0ae7aeabcf69764d532cb544cd2e1c18e3b154779bfc3224ca862e6b44674f6434deb9d893237bccc7a94b40117298d1c15dbaeacc280eb3fd41fafb8abe390544245cd15773832e65d2e253e4c3e5d21f5b140913858ebd740c87fce482f581556aad122acf75a6d1125fd2b2eb548f61e86d4690731d59f40b85e1aa26c1f09c572921f30a2557befaaeccc78daf6b960a567d5677d638d3cd2d4a625907243054755f0270e3dae001beb2556a9e4aa5b004dca652a4800eb3be3f45aff8cda4d435922419302db578ad0154429fdd49e91a20cc85ea4a65d4a7077243d63869531f4a2e853efac17ea0a2f14dce078ce1db367e32f778e67ea04b7d2aa96cbc63acb3541bbea7d8da5dc01ce58e41c082a176779faf7a5239c8f2e473162d20c986512b1979377c2dc4b36f5ebd0f601c9e70e76174a328e43087a1b0c55611b3e395cefdbf94439e0a19201cecab2fccd66ef6ae2e1005f88d6c011574997bd6c7eb0c7a57a5c0f365af2527b3867cb4dd1ed77187c66d9a4dd670cf7c197eda8c4538923453a7aa48cb4a44772bed2abed9dc94ce9671ddb4f41f88280732f28960ab0f0b4408ed293d133a08fb7f3e6d647400748f22d469b2d14864700775ecc751b1ca73eb7610de7d07655e8fe2349a69371ee4e78f8430a6521f3e7bef5265367fde92f0a6013c8d12ce9896f17dd01564c2be06fe4e15cce456d6306ed6c4281dc05c5fae772632d8a2b46cc340483eb93cb6c47afe3d437a9d04cb048b64b7f77b99426d93faee7f84c22f3f0c35ce1278c682bba9abcccc3a36f6b4ddb536d2e34f5324b6d92941b7b87df079733e7dc18ca788e7ec39d1f8f782ce78a5d87ceb713ccb3d4a8a1d3e584ac04e63d74eaf123bef5eba06749be855268d6032434e4f7fb8ea6f5919914d7739c5487d47563195a2a5d3898349bb5049fc164d6fc32479643199b8056a376246fb9cf629bc8f5080da1db008cb6e561c509833f9b745a182a72cae35d7d65874bc7d4a7f0bce8f7167caf53ef801a5a90427a49e8ecdef865c5bbe55bda548d25ca8ed0ca8a2501df0739594370eed1c507040f93fa2bfc5a093806b3efc96454b8d16ccadcf000dedccd62b964788925574516ed6f22f617c428fd357e6fde53547fa9231d16df965064eb4a7fe153e892abafd1d4a35236e9af99ac3b728c1eb5bf82e4bd9bdf37033f3c2ae641c1ab3dd8eed259a56f55904d1b823b98a3444e03587e74dab05ce11cd904a5f11c121797d40861b3000a2be08b3840c04f3a774c1b6f66733a0308c101e6"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001a80)='./file0\x00', 0x8000, &(0x7f0000001b00)={0x75, 0x86, 0x180000, {r6}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xc0, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3ea1545329c7f6eccfece05a8fce7b11"}, @NL80211_ATTR_PMK={0x14, 0xfe, "252699e2e06ef8bf60708d6e9ac6f7a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6edb37ade1e0207a98322a78bf5a7d96"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fecac945a514a5fed84d9a66c9df946b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3c16be46ea0936d8b480b3fcdca5eb24"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "73c65b068561e9bc6355937bb2f287ac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e32714e2dcf37936f392164879132699"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x4008005) 08:11:57 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xf97e, 0xffffffffffffffff, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000a00), 0xc71, 0x9) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:11:57 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001a80)='./file0\x00', 0x8000, &(0x7f0000001b00)={0x75, 0x86, 0x180000, {r6}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xc0, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3ea1545329c7f6eccfece05a8fce7b11"}, @NL80211_ATTR_PMK={0x14, 0xfe, "252699e2e06ef8bf60708d6e9ac6f7a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6edb37ade1e0207a98322a78bf5a7d96"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fecac945a514a5fed84d9a66c9df946b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3c16be46ea0936d8b480b3fcdca5eb24"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "73c65b068561e9bc6355937bb2f287ac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e32714e2dcf37936f392164879132699"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x4008005) 08:11:57 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xf97e, 0xffffffffffffffff, 0x3, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:11:57 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "647d1bd8d96dde526598d1d6674816d0fde6655be73d4391a7e493e4fa184a5e7ce2af0842bc351996bf042ea192dc195c88e27c262b66009c15328b4b4ce53ff243c1776ee71cf33bbe2180c99a21bb3a70b6142e7d0f1fc7bf9b6c13b19edfe9a8f5f26fb10f3a048f6765b584e137f53b2ed908174385b2f931e30bcc81ac85b83274759216fa0a89f55dff1a07b7f1ee0d7964d5d8289e92b5b55d57fad271eccfe7a36828dd5281b7d4b99819c0986eba516b7fb9c2a22d00f1261e33580ff273e361c8d3b1e36758b6d61e4931347feef7da7633b02e5583753e7f50c812bc93aaa20c12d8778d02738bf5908f82dadacb3641ca6f482dae3e8c9107abbb573623035893c1247c20afcab019504fa95f53cb0b19fe80b825ddacf35c6666be1cd1c69452864b3e3cc29fc9d04fe1e97201321bfbacfa54f0eed1521a03470f37f8d928cb2f6a0074a97915b408407e6cbc15fd7130d06134f47a86039acede539da353d3e90b27708f07e0f1d8bb12e7b98e2972c87f170937a90801f5772ec24c012b9598c3036b6a18b41dc8e1d5272ffeae47a2a500d505e8d2c26f1bf65ee44c0da91f9c7e509aa73cf12dfaabf889c7004480a6266209158f142716395bc1b61a5fe0b0d259f5ae1e56f83f6082c8d9aebc6c75655fed48de8f30bccf574abf8789a9120a00ed0e8a6a7ecbbaba8cdb03cbabbce8ba0da010e495e963dd1a5d096491c8d7e17e15aaa6810b1c3df7f0a51d3b2ed7d669bc68b3af91d1bfd3536e2a82f818161c3b590b1a1a3ab74943dfa01948a2095589787732ec3925b5364886b1bfb516ea38c1d7f69118e1548082765ff52cca9a6b578e19865b56452af34fd6c9a2389b3d90560080333a3adbe7e47acd9e0b6ba7513e6dbb6a1a2975c34309878346aac986225d7d59aae977672c32adf58eb6b7fdf3100ca34c96171aa28260c7809f9f0a8efce0d10b8d615b2d71df37ea634c461bdad6ef9e683bd73b480f0e8b178ef7c70a63441263d9faa012dae2b565c130cadcb071d4f85befa9c6f66ac35f085096801fc948bb1f97b0273bc7bf5d45095ddb6b9ba15df404e11d2c73bd73a5bad17d04a3b4499a17cc07bfc8c8079c4802b5747eff9fbfc35600a2878ead88059ae82f7fc9994a871e58d77c8d559b8b211ed7ade55a5555b718a64a16954a1a08fa0cc6045bf601b8cede6df4a37c3f6c924ec83be5ac13449bdb15dc944b85a8dec2e6af225043f2cf8fee80e48f9af7bdbe9d0501cf2d6e30b80a61aa3478a120572d6c4d4571703d5d777218fde489696cb452841242969732229e08cc6b06338e78606293884a72e495bcfa25a2a45cdb336fafe0344539984fc7f2443d1ed7ecbda82c91ae9fbb60184534208fec3e382591138e6f936315454ccd19dff8acb2d8a1d3a6a3914ec7cc70ab31cabfb1777ead95c9c9b74ca68b62679a363757876424695e388588438f7dd302bae1e7b65f656b63faf77dd918be7726f3414216f647d94d7b30cb660274d68b173656b787ca8821d3303163d86a9cdf060aecd89139c15e210174016057b6a62fb0f15ee9e162655a9280a5bfeb094e22c177ae8bbf2c8ac94f7272b27e99fdfe3539af81b902907bc5eae8a60abb3d9bb511f775e648e17047b6d2c25fea23acaa8d597de2a396cc2330f37462aadad4db1b814e08d20789a28cc3fcbc0a5f5b858d8ee5be8a55e35f13151d31f98b7ca2248f156e4a96c4af12d7a4bb6f4382abd94207e61ef0d5b8263fa7c30fba43ed6998e20f097bbaa14058a4fc03cb0cf0044ffe6fb8ed4926f215476b0fb5bfc79f83820b0ff1f73a968490efaeadb5110d4726cc604099819496cea60bcac9c4442cc9c23e65030cd15f8e7e80a7f1d0f2b4eaeea3c8f642273629617c262298551f0042ea20d1fb6cf92236afa63de175877aef2ec53f3e2de7bed3fd7177acb49512337b79326252496ec7885151d835f6ae2b7eefe1caf2f9005f069f97e665b9781b038aafd49d6776fba6465fb98cbfdcd03c9e9989ed00e857aa052ba6b7535dd9d9a44e9a019de718deea466629e3bd34b5e64b247ea1a0910790083947733d080fcd47b3ee029501c093823960c195163d7804f5671c384eefe7e5a20207af552c906113159eb1bfc0f444ac5a1eea67214c1251d463f7acc86fd23f7e7caf61024138bb0b88d14291b15a1ca2d2f231eb433630d3e64b8233eccc8cfecaef525e0edf55e1addc03c79bb707fc6abddc51adf9662117ab5c975f9f9d82ca55bd95465a4509f3a6d49346e5d310d4cc950cb3d71ea1f75b8ad0e6dd9469d9ace34d664ac882bc6591d6b8525f6313fa7e977671af3b6b07e6ee7c9393ee2c3e8878fa20ad30f56dd6eb1ed5ed9eec84013cd7bae03876d113dbad514c921ef89d2e5d9f0d8a4d579ffedab51d05a135c03e3437cf40c189f16601acbe15b5a2e9bf7f36bd9630203a8e06c542e8c92d40998a92329b950d503f5b499431d6a7ddf7aebfbac7297c23729b9272fc80e952ebf8b392068a005c9a95cf5f2da927bd6eaaee9e15d01f010c24f45fce643b39b6e5a04cd128b9cbcd0e547eabb8413cc8b0f3490777a1bac6b697a6ce05b10e4333c705948870ecbe0a8821a0df79c6580c4f3abfc513af27a34fa4ec803a0dabde6d4c5b505fb68a530e855692dfdb8703ee6ea232e70a3886f7eadc8fa50d23e7e7df5f5163705ca07c968b2cd638e49a82420ecae9888ddf4c8547d81ae1506f3c47e45a56eafd0db72b0d9e2e6e210ed226d95aac81b9198fc6d40c0d26636e9cccf448215510758769b217d4b13971968919af891143b7d9e1b5c4e021d9a04a29b7969027d926ed2bfb61e431ca485f30991291b4979f15d5530ea7e47b9037acbaaf8127299e4249c65959c2f73a93b52feea2df46e1fcf842ebdddca4b9cf6c40b6622792145d3bd20c6c4a06fe998f4e662a795f5048b44041cf7eb5cca55a6640c691a2ab599aad7d5bde9fa546dda3454831e002b7e23f8a469b126a5e239db672dc1ff9e3ce219ce23c4ee49a78d52d93f167e56fb05849c4cb1fbe33c255edb51af60412f6b5cce2041c023cc98d3b542b0c13a87901480928e6dd01a35aba2680e82d7cce509d96b028aab4453b8a2fea31e3e1c7ffda343b22f92c741e35e57d6796aef8a080f05a8dae371e895adaf70d62d4ea7dac956b27ab20d1f42095788ed64bc70ef34c581bfa4d7b1e256d7b46af138b1780622108852897a66b256c61e8eba7f44cabd6411a9ec2fa124f7f01debb47ebfb1998f62e09d477b9e009e1f29f11ade5d59c5bdb77659d60f1f02e58574604004c06d5993035245bb76ad5a8e4798be81ec72d74876d84e264392d341e551a96d046d652374d67a4a1e2c6af61e58b6648b546010973f4bcb87f001359b2335cd59822ef306ba18ef861ffbb631b6899868c7b12073a3af7a77cd18dabe1fc67da2537e308d051fe271235943548597a0f61343517c1696e694e2438d1694f8aab428e96f70f969a40b93d3f68385adfb5bc3e1067cea6053f1d035f818a88468d1342748e966fedca37978af95f1654e57906a9ee2e9bdea92357da5b92a028d59dc7574131d5750f6a89fdda212a46ee8430dbab02f253ecdf85f0afbfb401720f44dde7930a1b685ff588486d5fbfac53098cb8228301cb23c0bad455d68d06ae3da6042ffc2d88ca161b8353a7e931164e35c9ca47b5104e09ea7e388732cc9a586421411d050a8dd7707ee4af7359c7806a08673b0a84e8c3c2a8a4d06943ed6f156e492a56e44a945e4f2bbea0a6dc96bc7e7ed2cc0858b14770a45c37183b59216d6d7b01884a282a27585f574579cb7ec0ab169a2f0714ec7774d3a01622cc9258b477dc4b88470706f30631c7fa26290ecc3c298ba89fadefc0811eaad57a71d2bdbc5c203521165637566a4aaa167e3e1bd1c318d64a3f04faa81f7ccb57084d48e8c15e9150d4a8ab2f36d9fe477c9d7dbc045f414d6ac4dafb5e81107d5c50ca37d7d0547634e94f40a45c00be7bfc71ede51375c2c973c51af52bd4fe295dad43197959f90b81e24823e622a88a2122546aa8ce792aa79ad30a0a399b77cc70356c227137f592728433080eb5f6271b546c850b6c93b76ae0c80b4ff6893e7f201c1365da63d45589a5059fc8e67b0baa1b4712a2eba4542c0aa67c76c7f1a2da8937dd0096c0fc8c7bfe45b0e08ff150df3ab57e467f42ef2f9d1ccc02cb2750b77df6b676d103db1b565c23d5064c71305b4c9ca0b93a4fdccae9e95695b05a358b8b6402c8585907ab26e882ac0db464d8f1c3cdf7529f3090828d1e4f8f19f8d64e6b7f875e75b881b0006ec9b7b6520f82c9223ef736da7868943f8b3418fdbe9d80b6a31eb9b11bbf21e42bf6cf76f5d4b4f7be7196ceb89e744c126b5eb71caa00bc298a19ff6f327eec58f98bec3cd033559e210b1ec0ae7aeabcf69764d532cb544cd2e1c18e3b154779bfc3224ca862e6b44674f6434deb9d893237bccc7a94b40117298d1c15dbaeacc280eb3fd41fafb8abe390544245cd15773832e65d2e253e4c3e5d21f5b140913858ebd740c87fce482f581556aad122acf75a6d1125fd2b2eb548f61e86d4690731d59f40b85e1aa26c1f09c572921f30a2557befaaeccc78daf6b960a567d5677d638d3cd2d4a625907243054755f0270e3dae001beb2556a9e4aa5b004dca652a4800eb3be3f45aff8cda4d435922419302db578ad0154429fdd49e91a20cc85ea4a65d4a7077243d63869531f4a2e853efac17ea0a2f14dce078ce1db367e32f778e67ea04b7d2aa96cbc63acb3541bbea7d8da5dc01ce58e41c082a176779faf7a5239c8f2e473162d20c986512b1979377c2dc4b36f5ebd0f601c9e70e76174a328e43087a1b0c55611b3e395cefdbf94439e0a19201cecab2fccd66ef6ae2e1005f88d6c011574997bd6c7eb0c7a57a5c0f365af2527b3867cb4dd1ed77187c66d9a4dd670cf7c197eda8c4538923453a7aa48cb4a44772bed2abed9dc94ce9671ddb4f41f88280732f28960ab0f0b4408ed293d133a08fb7f3e6d647400748f22d469b2d14864700775ecc751b1ca73eb7610de7d07655e8fe2349a69371ee4e78f8430a6521f3e7bef5265367fde92f0a6013c8d12ce9896f17dd01564c2be06fe4e15cce456d6306ed6c4281dc05c5fae772632d8a2b46cc340483eb93cb6c47afe3d437a9d04cb048b64b7f77b99426d93faee7f84c22f3f0c35ce1278c682bba9abcccc3a36f6b4ddb536d2e34f5324b6d92941b7b87df079733e7dc18ca788e7ec39d1f8f782ce78a5d87ceb713ccb3d4a8a1d3e584ac04e63d74eaf123bef5eba06749be855268d6032434e4f7fb8ea6f5919914d7739c5487d47563195a2a5d3898349bb5049fc164d6fc32479643199b8056a376246fb9cf629bc8f5080da1db008cb6e561c509833f9b745a182a72cae35d7d65874bc7d4a7f0bce8f7167caf53ef801a5a90427a49e8ecdef865c5bbe55bda548d25ca8ed0ca8a2501df0739594370eed1c507040f93fa2bfc5a093806b3efc96454b8d16ccadcf000dedccd62b964788925574516ed6f22f617c428fd357e6fde53547fa9231d16df965064eb4a7fe153e892abafd1d4a35236e9af99ac3b728c1eb5bf82e4bd9bdf37033f3c2ae641c1ab3dd8eed259a56f55904d1b823b98a3444e03587e74dab05ce11cd904a5f11c121797d40861b3000a2be08b3840c04f3a774c1b6f66733a0308c101e6"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001a80)='./file0\x00', 0x8000, &(0x7f0000001b00)={0x75, 0x86, 0x180000, {r6}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xc0, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3ea1545329c7f6eccfece05a8fce7b11"}, @NL80211_ATTR_PMK={0x14, 0xfe, "252699e2e06ef8bf60708d6e9ac6f7a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6edb37ade1e0207a98322a78bf5a7d96"}, @NL80211_ATTR_PMK={0x14, 0xfe, "fecac945a514a5fed84d9a66c9df946b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3c16be46ea0936d8b480b3fcdca5eb24"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "73c65b068561e9bc6355937bb2f287ac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e32714e2dcf37936f392164879132699"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x4008005) 08:11:57 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) syz_extract_tcp_res$synack(&(0x7f00000009c0), 0x1, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:18 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="6270dc39e458a81bb9573d62bc346062e1fe62a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="ccf48503e721a2db69f3ffb8fa7e7e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801d) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x973}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 08:12:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) r8 = syz_open_dev$vcsu(&(0x7f0000000c00), 0x4, 0x200080) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3}) pipe(&(0x7f0000000cc0)) 08:12:18 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff5000/0x1000)=nil) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002840)={{0x1, r5, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:18 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount_setattr(r5, &(0x7f0000001a80)='./file0\x00', 0x8000, &(0x7f0000001b00)={0x75, 0x86, 0x180000, {r6}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:18 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000980)={0x0, 0x15}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:18 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) 08:12:18 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x194, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_IE={0x16c, 0x2a, [@perr={0x84, 0xd5, {0x0, 0xd, [@not_ext={{}, @broadcast, 0x400, "", 0x41}, @not_ext={{}, @device_a, 0x10000, "", 0x24}, @not_ext={{}, @broadcast, 0x1ff, "", 0x42}, @ext={{}, @device_b, 0x3, @device_a, 0x9}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @ext={{}, @device_b, 0x1ff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x7, @device_b, 0xf}, @not_ext={{}, @broadcast, 0xbf, "", 0x34}, @ext={{}, @device_b, 0x7, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x3f, @device_a, 0x7}, @ext={{}, @device_a, 0x40, @device_b, 0x37}, @ext={{}, @device_b, 0x1, @broadcast, 0x38}]}}, @perr={0x84, 0x8f, {0x0, 0x9, [@not_ext={{}, @device_b, 0x3, "", 0x34}, @ext={{}, @device_a, 0x5, @broadcast, 0x42}, @ext={{}, @device_a, 0x40, @broadcast, 0x1}, @not_ext={{}, @device_b, 0x6, "", 0x20}, @not_ext={{}, @device_b, 0x5, "", 0x24}, @ext={{}, @device_a, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_b, 0x9, "", 0x11}, @not_ext={{}, @device_a, 0x4, "", 0x3f}, @ext={{}, @device_a, 0x40, @device_b, 0x27}]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 08:12:18 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x194, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_IE={0x16c, 0x2a, [@perr={0x84, 0xd5, {0x0, 0xd, [@not_ext={{}, @broadcast, 0x400, "", 0x41}, @not_ext={{}, @device_a, 0x10000, "", 0x24}, @not_ext={{}, @broadcast, 0x1ff, "", 0x42}, @ext={{}, @device_b, 0x3, @device_a, 0x9}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @ext={{}, @device_b, 0x1ff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x7, @device_b, 0xf}, @not_ext={{}, @broadcast, 0xbf, "", 0x34}, @ext={{}, @device_b, 0x7, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x3f, @device_a, 0x7}, @ext={{}, @device_a, 0x40, @device_b, 0x37}, @ext={{}, @device_b, 0x1, @broadcast, 0x38}]}}, @perr={0x84, 0x8f, {0x0, 0x9, [@not_ext={{}, @device_b, 0x3, "", 0x34}, @ext={{}, @device_a, 0x5, @broadcast, 0x42}, @ext={{}, @device_a, 0x40, @broadcast, 0x1}, @not_ext={{}, @device_b, 0x6, "", 0x20}, @not_ext={{}, @device_b, 0x5, "", 0x24}, @ext={{}, @device_a, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_b, 0x9, "", 0x11}, @not_ext={{}, @device_a, 0x4, "", 0x3f}, @ext={{}, @device_a, 0x40, @device_b, 0x27}]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 08:12:18 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a80)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001200)={0x830, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x46c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x36, 0x16, 0x5, 0x12, 0x6, 0x5, 0xc, 0x30, 0x18, 0x18, 0x6, 0xb, 0x16, 0x32, 0x918a05721aa506fc, 0x36, 0x6, 0x1, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x23, 0x3, 0x3ff, 0x8000, 0x0, 0xdd, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4b6, 0x2, 0x101, 0x0, 0x62, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xcfc1, 0xe8bb, 0xff00, 0xfff, 0x0, 0x401, 0x1f]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0x8, 0x7, 0x400, 0x8001, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x0, 0x48, 0x18, 0x60, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x4}, {0x1, 0x16}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x16, 0x0, 0x1, 0x9, 0x6, 0x2, 0x30, 0x30, 0x6a, 0x18, 0x1b, 0x30, 0x6, 0x6, 0x12, 0x3, 0xb, 0xc, 0x3, 0x6, 0xb, 0x6, 0xb, 0x18, 0x16, 0x16, 0x3, 0x4, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6, 0x2, 0xd1, 0x2, 0x9, 0x16, 0x1d, 0x9, 0x24, 0x12, 0x43]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x6c, 0x4, 0x5, 0x6, 0x6, 0x30, 0x12, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x154, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x18, 0x48, 0x60, 0x30, 0x0, 0xc, 0xb, 0x2a, 0x5, 0x16, 0x36, 0x48, 0x60, 0x18, 0x11, 0x18, 0x12, 0xc, 0x60, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x6, 0xc}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x8, 0x7, 0x7, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x1}, {0x7, 0x7}, {0x6, 0x1f}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0x1, 0x1b, 0x6c, 0x6, 0x24, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {}, {0x2}, {0x3, 0x2}, {0x4}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15, 0x8, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x24, 0x3, 0x1, 0x8, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368d, 0x0, 0x5, 0x9, 0x400, 0x0, 0xe4, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x30, 0xfb0b26468c95ab8b, 0x1, 0x6c, 0x16, 0x3, 0xb, 0x36, 0x1b, 0x4c, 0x48, 0x5, 0x5, 0x30, 0x60, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x18, 0x16, 0x6c, 0xc, 0x24, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x57, 0x1, 0x60, 0x1b, 0x4, 0x3, 0x4, 0x24, 0x0, 0x6, 0x12, 0x79, 0x3, 0xb, 0x9, 0xc, 0x6, 0x48, 0xc, 0x2, 0xc, 0x1, 0x16, 0x12, 0x1, 0x12, 0x18, 0x16, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x6c, 0x6, 0x1a, 0x1b, 0x16, 0x3, 0x1b, 0x1e, 0x18, 0x24, 0x24, 0x12, 0x16, 0xc, 0x30, 0x16, 0x12, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x8, 0x200, 0x3, 0xe5, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccf8, 0x7fff, 0x7fff, 0x7b4, 0x0, 0x800, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0xff, 0x1, 0xf93, 0x2, 0xef, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeef6, 0x3, 0x1, 0x2, 0x0, 0x200, 0x4, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x56d, 0x3, 0x0, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x6, 0x3, 0x2, 0x5, 0x2, 0xc, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x800, 0x7ff, 0x401, 0x100, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x1000, 0x2, 0xc4, 0x8, 0x9, 0x13]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x1, 0xb, 0x16, 0x6, 0xc, 0x36, 0x6, 0x2, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x24, 0xb, 0x6, 0x1, 0x12, 0x36, 0x7064ae162a8bd345, 0x12, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x18, 0x6, 0x5, 0x9, 0x18, 0x36, 0x16, 0x7b, 0x6, 0x60, 0x36, 0x1, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x7, 0x1, 0x9, 0xc3f8, 0x7, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe23}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x3, 0x24, 0x16, 0x1, 0x4, 0xc, 0x0, 0x6, 0x9, 0x48, 0x9, 0x60, 0x2, 0x5, 0x1b, 0x2, 0x60, 0x18, 0x20, 0x5, 0x6, 0x1b, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x830}, 0x1, 0x0, 0x0, 0x9aaac3efffc73303}, 0xc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000001b00)={{0x0, 0x0, 0x80000001, 0x3, 0x7df6cdd9}, 0x10001, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x95, 0x2, 0x1}) 08:12:18 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4040, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:18 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:18 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40801) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x194, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_IE={0x16c, 0x2a, [@perr={0x84, 0xd5, {0x0, 0xd, [@not_ext={{}, @broadcast, 0x400, "", 0x41}, @not_ext={{}, @device_a, 0x10000, "", 0x24}, @not_ext={{}, @broadcast, 0x1ff, "", 0x42}, @ext={{}, @device_b, 0x3, @device_a, 0x9}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @ext={{}, @device_b, 0x1ff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x13}, @ext={{}, @broadcast, 0x7, @device_b, 0xf}, @not_ext={{}, @broadcast, 0xbf, "", 0x34}, @ext={{}, @device_b, 0x7, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x3f, @device_a, 0x7}, @ext={{}, @device_a, 0x40, @device_b, 0x37}, @ext={{}, @device_b, 0x1, @broadcast, 0x38}]}}, @perr={0x84, 0x8f, {0x0, 0x9, [@not_ext={{}, @device_b, 0x3, "", 0x34}, @ext={{}, @device_a, 0x5, @broadcast, 0x42}, @ext={{}, @device_a, 0x40, @broadcast, 0x1}, @not_ext={{}, @device_b, 0x6, "", 0x20}, @not_ext={{}, @device_b, 0x5, "", 0x24}, @ext={{}, @device_a, 0x8, @broadcast, 0x25}, @not_ext={{}, @device_b, 0x9, "", 0x11}, @not_ext={{}, @device_a, 0x4, "", 0x3f}, @ext={{}, @device_a, 0x40, @device_b, 0x27}]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 08:12:18 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff5000/0x1000)=nil) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002840)={{0x1, r5, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) r8 = syz_open_dev$vcsu(&(0x7f0000000c00), 0x4, 0x200080) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3}) pipe(&(0x7f0000000cc0)) 08:12:19 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x428, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x1d, [0x9, 0x4, 0xffffff47, 0x9, 0x7fffffff, 0x7, 0x1a93bca8, 0x0, 0x4, 0x8, 0xfffffffe, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0xff, 0x2, 0xf778, 0x8, 0x10001, 0x6, 0x3, 0x7, 0x7, 0x727e4901, 0x18e, 0x6, 0x0, 0x0, 0x800, 0x3220, 0xb4, 0x7, 0x40, 0x1, 0xffff, 0x80000001, 0x2, 0x3, 0x4, 0x1, 0xff, 0xb1, 0x7, 0xc00, 0xff, 0x4, 0x3be, 0xffff, 0x7ff, 0x1800000, 0xfffffffe, 0x6, 0x5, 0xe005, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x80000000, 0x1f, 0x9], [0x400, 0xfffffc00, 0x1ff, 0x7ff, 0x1, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x6, 0x6, 0x7fff, 0x7fff, 0x3, 0xfffffffe, 0x7f, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x8, 0x8, 0x1ff, 0x81, 0x1, 0x7fff, 0x690a, 0x3, 0x0, 0x0, 0x1218, 0x1, 0x4, 0x48a06b1d, 0x8, 0x0, 0x3, 0x7, 0x0, 0x8, 0xbc000000, 0x5, 0x194e5ed3, 0xe844, 0x1, 0x9, 0x5cd8, 0x7, 0x3ff, 0x3b8, 0x0, 0x7ff, 0x60, 0x2, 0xffff, 0x80, 0x5, 0x1000], [0x2, 0x8, 0x0, 0x4, 0xffff5452, 0x8, 0x1, 0x401, 0x60, 0x358, 0x3, 0x84, 0x3, 0xb62, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x7, 0x356, 0x3f0, 0x5, 0x4, 0x6, 0x1, 0x400, 0x1ff, 0x1ff, 0x3, 0x80000001, 0x7f, 0xffffffff, 0xe267, 0x3d4, 0x80000001, 0x214, 0x0, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2, 0x80, 0x10, 0x80, 0x8001, 0x7, 0xc93, 0x8001, 0x1, 0x1, 0x20, 0xfff, 0x7, 0x3f, 0x80, 0xffffffff, 0x20, 0x8, 0xff, 0x800, 0x9, 0x7fff], [0xfffff77c, 0x7fff, 0x1, 0x8000, 0x800, 0x7c, 0x7, 0x5, 0xe100, 0x2, 0x9, 0xffffd774, 0x6, 0x896, 0x6, 0xab4, 0x400, 0x1ff, 0x5, 0xffff, 0xb85, 0x3, 0xde, 0x8000, 0x95e6, 0x9de, 0x8, 0x7, 0xe0, 0x9, 0x7ff, 0x200, 0x0, 0x81, 0x7ff, 0x200, 0x6, 0x8001, 0x7, 0xb06, 0xc29, 0x2, 0x0, 0x7, 0x4, 0x1ff, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x7fffffff, 0x6d1f, 0xead, 0x3, 0x0, 0x100, 0xf5, 0x101, 0x1, 0x4, 0x1000, 0x2, 0x10000], 0x8, ['$\xbb@-+*-\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20040041}, 0x801) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:19 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a80)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001200)={0x830, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x46c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x36, 0x16, 0x5, 0x12, 0x6, 0x5, 0xc, 0x30, 0x18, 0x18, 0x6, 0xb, 0x16, 0x32, 0x918a05721aa506fc, 0x36, 0x6, 0x1, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x23, 0x3, 0x3ff, 0x8000, 0x0, 0xdd, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4b6, 0x2, 0x101, 0x0, 0x62, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xcfc1, 0xe8bb, 0xff00, 0xfff, 0x0, 0x401, 0x1f]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0x8, 0x7, 0x400, 0x8001, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x0, 0x48, 0x18, 0x60, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x4}, {0x1, 0x16}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x16, 0x0, 0x1, 0x9, 0x6, 0x2, 0x30, 0x30, 0x6a, 0x18, 0x1b, 0x30, 0x6, 0x6, 0x12, 0x3, 0xb, 0xc, 0x3, 0x6, 0xb, 0x6, 0xb, 0x18, 0x16, 0x16, 0x3, 0x4, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6, 0x2, 0xd1, 0x2, 0x9, 0x16, 0x1d, 0x9, 0x24, 0x12, 0x43]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x6c, 0x4, 0x5, 0x6, 0x6, 0x30, 0x12, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x154, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x18, 0x48, 0x60, 0x30, 0x0, 0xc, 0xb, 0x2a, 0x5, 0x16, 0x36, 0x48, 0x60, 0x18, 0x11, 0x18, 0x12, 0xc, 0x60, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x6, 0xc}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x8, 0x7, 0x7, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x1}, {0x7, 0x7}, {0x6, 0x1f}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0x1, 0x1b, 0x6c, 0x6, 0x24, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {}, {0x2}, {0x3, 0x2}, {0x4}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15, 0x8, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x24, 0x3, 0x1, 0x8, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368d, 0x0, 0x5, 0x9, 0x400, 0x0, 0xe4, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x30, 0xfb0b26468c95ab8b, 0x1, 0x6c, 0x16, 0x3, 0xb, 0x36, 0x1b, 0x4c, 0x48, 0x5, 0x5, 0x30, 0x60, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x18, 0x16, 0x6c, 0xc, 0x24, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x57, 0x1, 0x60, 0x1b, 0x4, 0x3, 0x4, 0x24, 0x0, 0x6, 0x12, 0x79, 0x3, 0xb, 0x9, 0xc, 0x6, 0x48, 0xc, 0x2, 0xc, 0x1, 0x16, 0x12, 0x1, 0x12, 0x18, 0x16, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x6c, 0x6, 0x1a, 0x1b, 0x16, 0x3, 0x1b, 0x1e, 0x18, 0x24, 0x24, 0x12, 0x16, 0xc, 0x30, 0x16, 0x12, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x8, 0x200, 0x3, 0xe5, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccf8, 0x7fff, 0x7fff, 0x7b4, 0x0, 0x800, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0xff, 0x1, 0xf93, 0x2, 0xef, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeef6, 0x3, 0x1, 0x2, 0x0, 0x200, 0x4, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x56d, 0x3, 0x0, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x6, 0x3, 0x2, 0x5, 0x2, 0xc, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x800, 0x7ff, 0x401, 0x100, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x1000, 0x2, 0xc4, 0x8, 0x9, 0x13]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x1, 0xb, 0x16, 0x6, 0xc, 0x36, 0x6, 0x2, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x24, 0xb, 0x6, 0x1, 0x12, 0x36, 0x7064ae162a8bd345, 0x12, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x18, 0x6, 0x5, 0x9, 0x18, 0x36, 0x16, 0x7b, 0x6, 0x60, 0x36, 0x1, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x7, 0x1, 0x9, 0xc3f8, 0x7, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe23}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x3, 0x24, 0x16, 0x1, 0x4, 0xc, 0x0, 0x6, 0x9, 0x48, 0x9, 0x60, 0x2, 0x5, 0x1b, 0x2, 0x60, 0x18, 0x20, 0x5, 0x6, 0x1b, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x830}, 0x1, 0x0, 0x0, 0x9aaac3efffc73303}, 0xc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000001b00)={{0x0, 0x0, 0x80000001, 0x3, 0x7df6cdd9}, 0x10001, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x95, 0x2, 0x1}) 08:12:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) r8 = syz_open_dev$vcsu(&(0x7f0000000c00), 0x4, 0x200080) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3}) pipe(&(0x7f0000000cc0)) 08:12:31 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="6270dc39e458a81bb9573d62bc346062e1fe62a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="ccf48503e721a2db69f3ffb8fa7e7e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801d) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x973}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 08:12:31 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000000, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x40801) 08:12:31 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a80)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001200)={0x830, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x46c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x36, 0x16, 0x5, 0x12, 0x6, 0x5, 0xc, 0x30, 0x18, 0x18, 0x6, 0xb, 0x16, 0x32, 0x918a05721aa506fc, 0x36, 0x6, 0x1, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x23, 0x3, 0x3ff, 0x8000, 0x0, 0xdd, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4b6, 0x2, 0x101, 0x0, 0x62, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xcfc1, 0xe8bb, 0xff00, 0xfff, 0x0, 0x401, 0x1f]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0x8, 0x7, 0x400, 0x8001, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x0, 0x48, 0x18, 0x60, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x4}, {0x1, 0x16}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x16, 0x0, 0x1, 0x9, 0x6, 0x2, 0x30, 0x30, 0x6a, 0x18, 0x1b, 0x30, 0x6, 0x6, 0x12, 0x3, 0xb, 0xc, 0x3, 0x6, 0xb, 0x6, 0xb, 0x18, 0x16, 0x16, 0x3, 0x4, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6, 0x2, 0xd1, 0x2, 0x9, 0x16, 0x1d, 0x9, 0x24, 0x12, 0x43]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x6c, 0x4, 0x5, 0x6, 0x6, 0x30, 0x12, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x154, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x18, 0x48, 0x60, 0x30, 0x0, 0xc, 0xb, 0x2a, 0x5, 0x16, 0x36, 0x48, 0x60, 0x18, 0x11, 0x18, 0x12, 0xc, 0x60, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x6, 0xc}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x8, 0x7, 0x7, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x1}, {0x7, 0x7}, {0x6, 0x1f}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0x1, 0x1b, 0x6c, 0x6, 0x24, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {}, {0x2}, {0x3, 0x2}, {0x4}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15, 0x8, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x24, 0x3, 0x1, 0x8, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368d, 0x0, 0x5, 0x9, 0x400, 0x0, 0xe4, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x30, 0xfb0b26468c95ab8b, 0x1, 0x6c, 0x16, 0x3, 0xb, 0x36, 0x1b, 0x4c, 0x48, 0x5, 0x5, 0x30, 0x60, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x18, 0x16, 0x6c, 0xc, 0x24, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x57, 0x1, 0x60, 0x1b, 0x4, 0x3, 0x4, 0x24, 0x0, 0x6, 0x12, 0x79, 0x3, 0xb, 0x9, 0xc, 0x6, 0x48, 0xc, 0x2, 0xc, 0x1, 0x16, 0x12, 0x1, 0x12, 0x18, 0x16, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x6c, 0x6, 0x1a, 0x1b, 0x16, 0x3, 0x1b, 0x1e, 0x18, 0x24, 0x24, 0x12, 0x16, 0xc, 0x30, 0x16, 0x12, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x8, 0x200, 0x3, 0xe5, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccf8, 0x7fff, 0x7fff, 0x7b4, 0x0, 0x800, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0xff, 0x1, 0xf93, 0x2, 0xef, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeef6, 0x3, 0x1, 0x2, 0x0, 0x200, 0x4, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x56d, 0x3, 0x0, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x6, 0x3, 0x2, 0x5, 0x2, 0xc, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x800, 0x7ff, 0x401, 0x100, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x1000, 0x2, 0xc4, 0x8, 0x9, 0x13]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x1, 0xb, 0x16, 0x6, 0xc, 0x36, 0x6, 0x2, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x24, 0xb, 0x6, 0x1, 0x12, 0x36, 0x7064ae162a8bd345, 0x12, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x18, 0x6, 0x5, 0x9, 0x18, 0x36, 0x16, 0x7b, 0x6, 0x60, 0x36, 0x1, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x7, 0x1, 0x9, 0xc3f8, 0x7, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe23}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x3, 0x24, 0x16, 0x1, 0x4, 0xc, 0x0, 0x6, 0x9, 0x48, 0x9, 0x60, 0x2, 0x5, 0x1b, 0x2, 0x60, 0x18, 0x20, 0x5, 0x6, 0x1b, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x830}, 0x1, 0x0, 0x0, 0x9aaac3efffc73303}, 0xc0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000001b00)={{0x0, 0x0, 0x80000001, 0x3, 0x7df6cdd9}, 0x10001, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x95, 0x2, 0x1}) 08:12:31 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff5000/0x1000)=nil) getresuid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002840)={{0x1, r5, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:31 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:31 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) 08:12:31 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r1, {0x3a8c}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:31 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a80)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f0000001200)={0x830, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x46c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x36, 0x16, 0x5, 0x12, 0x6, 0x5, 0xc, 0x30, 0x18, 0x18, 0x6, 0xb, 0x16, 0x32, 0x918a05721aa506fc, 0x36, 0x6, 0x1, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x23, 0x3, 0x3ff, 0x8000, 0x0, 0xdd, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4b6, 0x2, 0x101, 0x0, 0x62, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xcfc1, 0xe8bb, 0xff00, 0xfff, 0x0, 0x401, 0x1f]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x6, 0x8, 0x7, 0x400, 0x8001, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x60, 0x0, 0x48, 0x18, 0x60, 0x6c, 0x60]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x2}, {0x4}, {0x1, 0x16}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x16, 0x0, 0x1, 0x9, 0x6, 0x2, 0x30, 0x30, 0x6a, 0x18, 0x1b, 0x30, 0x6, 0x6, 0x12, 0x3, 0xb, 0xc, 0x3, 0x6, 0xb, 0x6, 0xb, 0x18, 0x16, 0x16, 0x3, 0x4, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x6, 0x2, 0xd1, 0x2, 0x9, 0x16, 0x1d, 0x9, 0x24, 0x12, 0x43]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6, 0x6c, 0x4, 0x5, 0x6, 0x6, 0x30, 0x12, 0x24, 0x12]}]}, @NL80211_BAND_60GHZ={0x154, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {}, {0x2, 0x9}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x3, 0x18, 0x48, 0x60, 0x30, 0x0, 0xc, 0xb, 0x2a, 0x5, 0x16, 0x36, 0x48, 0x60, 0x18, 0x11, 0x18, 0x12, 0xc, 0x60, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x2}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x6, 0xc}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x8, 0x7, 0x7, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x7, 0x4}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x1}, {0x7, 0x7}, {0x6, 0x1f}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0x1, 0x1b, 0x6c, 0x6, 0x24, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x9}, {}, {0x2}, {0x3, 0x2}, {0x4}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x4, 0x7}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa15, 0x8, 0x3ff, 0x0, 0x1, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x24, 0x3, 0x1, 0x8, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {}, {0x7, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x368d, 0x0, 0x5, 0x9, 0x400, 0x0, 0xe4, 0x4a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x30, 0xfb0b26468c95ab8b, 0x1, 0x6c, 0x16, 0x3, 0xb, 0x36, 0x1b, 0x4c, 0x48, 0x5, 0x5, 0x30, 0x60, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x18, 0x16, 0x6c, 0xc, 0x24, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x57, 0x1, 0x60, 0x1b, 0x4, 0x3, 0x4, 0x24, 0x0, 0x6, 0x12, 0x79, 0x3, 0xb, 0x9, 0xc, 0x6, 0x48, 0xc, 0x2, 0xc, 0x1, 0x16, 0x12, 0x1, 0x12, 0x18, 0x16, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x4, 0x6c, 0x6, 0x1a, 0x1b, 0x16, 0x3, 0x1b, 0x1e, 0x18, 0x24, 0x24, 0x12, 0x16, 0xc, 0x30, 0x16, 0x12, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x8, 0x200, 0x3, 0xe5, 0x3, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccf8, 0x7fff, 0x7fff, 0x7b4, 0x0, 0x800, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0xff, 0x1, 0xf93, 0x2, 0xef, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeef6, 0x3, 0x1, 0x2, 0x0, 0x200, 0x4, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x56d, 0x3, 0x0, 0x8, 0x7, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x6, 0x3, 0x2, 0x5, 0x2, 0xc, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x8}, {0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x800, 0x7ff, 0x401, 0x100, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x1000, 0x2, 0xc4, 0x8, 0x9, 0x13]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x1, 0xb, 0x16, 0x6, 0xc, 0x36, 0x6, 0x2, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x24, 0xb, 0x6, 0x1, 0x12, 0x36, 0x7064ae162a8bd345, 0x12, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x18, 0x6, 0x5, 0x9, 0x18, 0x36, 0x16, 0x7b, 0x6, 0x60, 0x36, 0x1, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x5, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x7, 0x1, 0x9, 0xc3f8, 0x7, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe23}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0x3, 0x24, 0x16, 0x1, 0x4, 0xc, 0x0, 0x6, 0x9, 0x48, 0x9, 0x60, 0x2, 0x5, 0x1b, 0x2, 0x60, 0x18, 0x20, 0x5, 0x6, 0x1b, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x830}, 0x1, 0x0, 0x0, 0x9aaac3efffc73303}, 0xc0) 08:12:31 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r7 = memfd_secret(0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x454, 0x3f3, 0x10, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x4, [0x5, 0x40, 0x5, 0x10000, 0x2, 0x7fff, 0x8, 0xba, 0x6, 0x9, 0x81, 0x87a, 0x200, 0x4, 0x6, 0x1, 0x0, 0x65, 0x8001, 0x2, 0x7ff, 0xc624, 0x6, 0x0, 0x8, 0x5, 0x0, 0x8, 0x5, 0x9, 0x1, 0x3, 0x8, 0x8, 0x4, 0x80000001, 0x10000, 0x9, 0xf1e2, 0x4, 0x8000, 0x0, 0x0, 0x9096, 0x4, 0x80000001, 0x8000, 0x7f, 0x401, 0x6, 0x5, 0x4, 0x0, 0x0, 0x6, 0x401, 0x578, 0x1000, 0x200, 0x81, 0x80000001, 0x0, 0x40], [0xfffffedb, 0x6, 0x0, 0x1, 0x7, 0x7, 0x4, 0xa7bf, 0x3, 0x8000, 0x1, 0x80000001, 0x5000, 0x3ff, 0x0, 0x47, 0x9, 0x1f, 0x0, 0x9, 0x3, 0x8, 0x1b, 0xe43e, 0x100, 0x2, 0x6, 0xffff8001, 0x6, 0x1, 0x1dc, 0x1, 0x0, 0x1, 0x400, 0x0, 0x14, 0x504a82e9, 0x1, 0x10000, 0x0, 0x1000, 0xe3, 0x2, 0x5, 0x80000000, 0x5, 0x100, 0x10001, 0x0, 0x2, 0x101, 0x6, 0x9, 0x7f, 0x0, 0x7, 0x9, 0x5, 0x7cc, 0x8, 0x1, 0x8001, 0xaa], [0x66d, 0x3, 0x80, 0x5, 0x9, 0xb4a2, 0x0, 0x7ff, 0x4, 0xa9, 0xc4c4, 0x7, 0x400, 0x1, 0x4, 0x5, 0x4, 0x1, 0x5ed, 0x7fffffff, 0x2, 0x2, 0x1, 0x401, 0x5, 0xba, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x2, 0x3, 0xfffffffc, 0x1, 0x40, 0x70c4, 0x0, 0x81, 0x0, 0x8, 0xfffffff9, 0x0, 0x1, 0x101, 0x4, 0x2, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x274, 0x10001, 0x9, 0x10001, 0x3, 0x6, 0x10001, 0x2, 0x6561, 0x1f, 0x0, 0x7fffffff], [0x0, 0x8, 0x1, 0x8, 0xe4f, 0x8, 0x6, 0xced, 0x2, 0x0, 0xfff, 0x80000001, 0x7, 0x1, 0x6, 0x4, 0x7fffffff, 0x7, 0x5, 0x10000, 0x2, 0x400000, 0x0, 0x7, 0x9, 0x9, 0x9, 0x5, 0x80, 0x8d8, 0xad17, 0x80000000, 0x7, 0xfffffff9, 0x4, 0x5, 0x8, 0x0, 0x0, 0xffffffe1, 0xcad9, 0x9, 0x7, 0x8, 0xffffff81, 0x70ea, 0x31, 0x80000000, 0x401, 0x100, 0x510b9737, 0x1, 0x3, 0x7f, 0x2, 0x0, 0x4, 0x6, 0x45, 0xd763, 0x3, 0x3, 0x7, 0x3], 0x33, ['wlan1\x00', '[}+*!{%\\{+-*-\x00', 'wlan1\x00', 'wlan1\x00', ')\x13[\\\x00', 'team0\x00', '[+\x00', '$\'&\'\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) 08:12:31 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:12:31 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:31 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000008c0)={0x10c8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffe1}]}, @TIPC_NLA_NODE={0x100c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x814}, 0x400c085) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:31 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff5000/0x1000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:31 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) 08:12:31 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x3f5, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:12:45 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) memfd_secret(0x0) 08:12:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) syz_open_dev$vcsu(&(0x7f0000000c00), 0x4, 0x200080) pipe(&(0x7f0000000cc0)) 08:12:45 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 08:12:45 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe200000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55362afa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048881}, 0x80) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:45 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:12:45 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_open_dev$evdev(&(0x7f0000000840), 0x5, 0x400000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:45 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="6270dc39e458a81bb9573d62bc346062e1fe62a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="ccf48503e721a2db69f3ffb8fa7e7e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801d) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x973}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 08:12:45 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x453, 0x800, 0x70bd2b, 0x25dfdbfb, "ad34ec487f4fb642a5c3a5ec6c9a74b639905b9d1434e2e44a48e418e0adaedbf3949af9403726820a0188b949ec7b4fa136bcb7bfd6ced022f068cfceeecae27d983aa34399de5e2a06091574eedf4dd6c1f700a3c13a11e9739316217a183a0077cdcf9256993f7f476ec3ce059458945e7731fedc79764874c0bbaa4fa9914d3b0dbbb7c8a0569143df68f89280", ["", "", "", "", ""]}, 0xa0}}, 0x40000) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:12:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x453, 0x400, 0x70bd26, 0x25dfdbfe, "ab202d538c0cd58c135096c0366b6aad1543ba96582fbaceb805826d8f522ad93f77e0bd31eaa2b187262db3af155d019f", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200040c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r7, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x802) pipe(&(0x7f0000000cc0)) 08:12:46 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0xffff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:46 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmget(0x3, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:46 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x40000, 0x0) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:12:58 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="6270dc39e458a81bb9573d62bc346062e1fe62a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="ccf48503e721a2db69f3ffb8fa7e7e"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801d) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)) 08:12:58 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) r3 = syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) mmap$binder(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:12:58 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 08:12:58 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40400, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '$-\\]]{'}}], [{@uid_lt={'uid<', r4}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}]}}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:12:58 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4090) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:12:58 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004000) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:12:58 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x191}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 08:12:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) pipe(&(0x7f0000000cc0)) 08:12:58 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x180}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xfe}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40080) [ 179.583350] Bluetooth: hci1: command 0x0406 tx timeout [ 179.584203] Bluetooth: hci0: command 0x0406 tx timeout [ 179.584912] Bluetooth: hci3: command 0x0406 tx timeout [ 179.585670] Bluetooth: hci2: command 0x0406 tx timeout [ 179.586390] Bluetooth: hci6: command 0x0406 tx timeout [ 179.587141] Bluetooth: hci7: command 0x0406 tx timeout [ 179.587855] Bluetooth: hci5: command 0x0406 tx timeout [ 180.095136] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.096397] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.097346] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.098624] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.100278] Call Trace: [ 180.101212] [ 180.101936] __schedule+0x893/0x2470 [ 180.102623] ? io_schedule_timeout+0x150/0x150 [ 180.103415] ? do_raw_spin_lock+0x121/0x260 [ 180.104179] ? rwlock_bug.part.0+0x90/0x90 [ 180.104816] schedule+0xda/0x1b0 [ 180.105355] rescuer_thread+0x851/0xdb0 [ 180.105954] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.106708] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.107471] ? lockdep_hardirqs_on+0x79/0x100 [ 180.108173] ? worker_thread+0x1260/0x1260 [ 180.108827] kthread+0x2ed/0x3a0 [ 180.109367] ? kthread_complete_and_exit+0x40/0x40 [ 180.110122] ret_from_fork+0x22/0x30 [ 180.110714] [ 180.111092] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.112074] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.112853] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.113989] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.115226] Call Trace: [ 180.115613] [ 180.115969] __schedule+0x893/0x2470 [ 180.116574] ? io_schedule_timeout+0x150/0x150 [ 180.117292] ? do_raw_spin_lock+0x121/0x260 [ 180.117944] ? rwlock_bug.part.0+0x90/0x90 [ 180.118624] schedule+0xda/0x1b0 [ 180.119175] rescuer_thread+0x851/0xdb0 [ 180.119783] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.120557] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.121325] ? lockdep_hardirqs_on+0x79/0x100 [ 180.122000] ? worker_thread+0x1260/0x1260 [ 180.122667] kthread+0x2ed/0x3a0 [ 180.123212] ? kthread_complete_and_exit+0x40/0x40 [ 180.123974] ret_from_fork+0x22/0x30 [ 180.124588] [ 180.124947] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.125932] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.126729] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.127872] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.129124] Call Trace: [ 180.129517] [ 180.129871] __schedule+0x893/0x2470 [ 180.130482] ? io_schedule_timeout+0x150/0x150 [ 180.131192] ? do_raw_spin_lock+0x121/0x260 [ 180.131874] ? rwlock_bug.part.0+0x90/0x90 [ 180.132555] schedule+0xda/0x1b0 [ 180.133110] rescuer_thread+0x851/0xdb0 [ 180.133716] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.134493] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.135268] ? lockdep_hardirqs_on+0x79/0x100 [ 180.135957] ? worker_thread+0x1260/0x1260 [ 180.136630] kthread+0x2ed/0x3a0 [ 180.137168] ? kthread_complete_and_exit+0x40/0x40 [ 180.137910] ret_from_fork+0x22/0x30 [ 180.138536] [ 180.138893] INFO: task netns:6 blocked for more than 143 seconds. [ 180.139831] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.140640] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.141791] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.143030] Call Trace: [ 180.143438] [ 180.143796] __schedule+0x893/0x2470 [ 180.144413] ? io_schedule_timeout+0x150/0x150 [ 180.145117] ? do_raw_spin_lock+0x121/0x260 [ 180.145771] ? rwlock_bug.part.0+0x90/0x90 [ 180.146456] schedule+0xda/0x1b0 [ 180.146988] rescuer_thread+0x851/0xdb0 [ 180.147637] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.148426] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.149213] ? lockdep_hardirqs_on+0x79/0x100 [ 180.149901] ? worker_thread+0x1260/0x1260 [ 180.150577] kthread+0x2ed/0x3a0 [ 180.151131] ? kthread_complete_and_exit+0x40/0x40 [ 180.151903] ret_from_fork+0x22/0x30 [ 180.152520] [ 180.152878] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.153870] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.154662] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.155813] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 180.157072] Workqueue: 0x0 (ata_sff) [ 180.157653] Call Trace: [ 180.158063] [ 180.158417] __schedule+0x893/0x2470 [ 180.158997] ? io_schedule_timeout+0x150/0x150 [ 180.159790] schedule+0xda/0x1b0 [ 180.160353] worker_thread+0x15f/0x1260 [ 180.160987] ? process_one_work+0x16a0/0x16a0 [ 180.161707] kthread+0x2ed/0x3a0 [ 180.162257] ? kthread_complete_and_exit+0x40/0x40 [ 180.163006] ret_from_fork+0x22/0x30 [ 180.163617] [ 180.163983] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.164984] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.165791] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.166937] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 180.168189] Workqueue: 0x0 (kblockd) [ 180.168777] Call Trace: [ 180.169194] [ 180.169548] __schedule+0x893/0x2470 [ 180.170166] ? io_schedule_timeout+0x150/0x150 [ 180.170877] schedule+0xda/0x1b0 [ 180.171432] worker_thread+0x15f/0x1260 [ 180.172108] ? process_one_work+0x16a0/0x16a0 [ 180.172809] kthread+0x2ed/0x3a0 [ 180.173361] ? kthread_complete_and_exit+0x40/0x40 [ 180.174122] ret_from_fork+0x22/0x30 [ 180.174708] [ 180.175091] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.176119] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.176895] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.178062] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.179301] Call Trace: [ 180.179710] [ 180.180087] __schedule+0x893/0x2470 [ 180.180674] ? io_schedule_timeout+0x150/0x150 [ 180.181394] ? do_raw_spin_lock+0x121/0x260 [ 180.182070] ? rwlock_bug.part.0+0x90/0x90 [ 180.182730] schedule+0xda/0x1b0 [ 180.183274] rescuer_thread+0x851/0xdb0 [ 180.183894] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.184665] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.185455] ? lockdep_hardirqs_on+0x79/0x100 [ 180.186162] ? worker_thread+0x1260/0x1260 [ 180.186813] kthread+0x2ed/0x3a0 [ 180.187372] ? kthread_complete_and_exit+0x40/0x40 [ 180.188146] ret_from_fork+0x22/0x30 [ 180.188741] [ 180.189127] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.190175] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.190954] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.192118] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.193386] Call Trace: [ 180.193770] [ 180.194160] __schedule+0x893/0x2470 [ 180.194740] ? io_schedule_timeout+0x150/0x150 [ 180.195477] ? mark_held_locks+0x9e/0xe0 [ 180.196148] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.196912] schedule+0xda/0x1b0 [ 180.197475] rcu_tasks_one_gp+0x3db/0xc10 [ 180.198176] rcu_tasks_kthread+0x80/0xa0 [ 180.198791] ? rcu_tasks_postscan+0x10/0x10 [ 180.199485] kthread+0x2ed/0x3a0 [ 180.200032] ? kthread_complete_and_exit+0x40/0x40 [ 180.200809] ret_from_fork+0x22/0x30 [ 180.201444] [ 180.201877] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.202921] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.203740] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.204894] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 180.206146] Workqueue: 0x0 (events_highpri) [ 180.206817] Call Trace: [ 180.207239] [ 180.207598] __schedule+0x893/0x2470 [ 180.208227] ? io_schedule_timeout+0x150/0x150 [ 180.208949] schedule+0xda/0x1b0 [ 180.209510] worker_thread+0x15f/0x1260 [ 180.210187] ? process_one_work+0x16a0/0x16a0 [ 180.210887] kthread+0x2ed/0x3a0 [ 180.211445] ? kthread_complete_and_exit+0x40/0x40 [ 180.212241] ret_from_fork+0x22/0x30 [ 180.212833] [ 180.213227] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 180.214252] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.215035] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.216214] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 180.217478] Call Trace: [ 180.217864] [ 180.218253] __schedule+0x893/0x2470 [ 180.218842] ? io_schedule_timeout+0x150/0x150 [ 180.219569] ? do_raw_spin_lock+0x121/0x260 [ 180.220297] ? rwlock_bug.part.0+0x90/0x90 [ 180.220942] schedule+0xda/0x1b0 [ 180.221498] rescuer_thread+0x851/0xdb0 [ 180.222152] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.222915] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.223712] ? lockdep_hardirqs_on+0x79/0x100 [ 180.224443] ? worker_thread+0x1260/0x1260 [ 180.225129] kthread+0x2ed/0x3a0 [ 180.225660] ? kthread_complete_and_exit+0x40/0x40 [ 180.226435] ret_from_fork+0x22/0x30 [ 180.227017] [ 180.227463] [ 180.227463] Showing all locks held in the system: [ 180.228429] 1 lock held by rcu_tasks_kthre/11: [ 180.229133] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.230611] 1 lock held by khungtaskd/25: [ 180.231247] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.232631] 1 lock held by systemd-journal/111: [ 180.233346] 1 lock held by in:imklog/188: [ 180.233956] #0: ffff88800d1bd9e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 180.235295] 2 locks held by syz-executor/4171: [ 180.235991] [ 180.236292] ============================================= [ 180.236292] 08:13:14 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)) 08:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) syz_open_dev$mouse(&(0x7f0000001200), 0x9, 0x802) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:13:14 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) getuid() shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:13:14 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_io_uring_complete(0x0) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:13:14 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:13:14 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xed}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x20000080) 08:13:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/184, 0xb8}) pipe(&(0x7f0000000cc0)) 08:13:14 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c042}, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000002c0)={0x7ff, 0x4, 0x8, 0x4, 0x1}, 0x14) r3 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x42804) r5 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0xa4e682) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2df8f5d7022c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x952}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008851) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x16000, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x430, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfb, {0x5, 0x1, 0x37, [0x7fffffff, 0x9, 0x0, 0x231, 0x1ff, 0x1, 0x4, 0x7fff, 0x40, 0x7, 0x5, 0x6be8, 0x9, 0x15b, 0x0, 0x1, 0x1ff, 0x2, 0x7, 0x7, 0x7ff, 0x4, 0x401, 0x8, 0x2b8a, 0x80000000, 0x1b17, 0x8cd5, 0x6, 0x8, 0x3, 0x40b6ae38, 0x7, 0x2, 0x3be, 0x8, 0x5, 0x9, 0xffffffff, 0x6, 0xcea, 0xffff, 0x1ff, 0xfffffffb, 0x1, 0x1, 0x6, 0xec, 0x8432, 0x5, 0x36, 0x963, 0x7f, 0x8, 0x3, 0x8000, 0x6, 0x4, 0x1f, 0x9, 0xfffffffb, 0x81, 0x4, 0x52b], [0x2, 0x5, 0x0, 0x9, 0xc0eb, 0x200, 0x800, 0x4, 0x2, 0x101, 0x40, 0x8, 0xffff, 0x6e, 0x6, 0x401, 0x5, 0x5, 0x20, 0x3ff, 0x59, 0x7, 0x5, 0x5, 0xd5c2, 0x1, 0xa5, 0x2, 0xffffffff, 0x8, 0x32, 0x7f, 0xffffffff, 0x4, 0x4, 0x401, 0x64, 0x1ff, 0x2, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4a74, 0x5, 0x40, 0x4, 0x9, 0x8, 0x7, 0xfffffffe, 0x4f4, 0x400, 0xa5, 0x4, 0x2, 0x2, 0x53, 0x1, 0xffff, 0x6, 0x6, 0x2], [0x7, 0x1000, 0x8, 0x4, 0x4, 0x24000000, 0x10000, 0x4, 0x5, 0x9, 0x5, 0x81, 0x2, 0x5, 0x0, 0x3, 0x2, 0x8001, 0x9, 0x80000000, 0x1, 0x7, 0x5, 0x3, 0x8, 0x10000, 0x4, 0x4, 0x100, 0x4, 0x9, 0xffffffff, 0x0, 0x8, 0x8, 0x1b35e7b9, 0x2, 0x8050, 0x0, 0x3, 0x0, 0x667, 0x3, 0x8, 0x7ff, 0x6, 0x8, 0x8000, 0x9f0, 0x80000000, 0x5, 0x10000, 0x1, 0x6, 0x1ff, 0x7fffffff, 0x696e, 0x0, 0x40, 0xffffffff, 0x92, 0x1, 0x3, 0x80000000], [0x0, 0x10001, 0x2, 0x7, 0x515, 0x0, 0x10000, 0x9, 0x8, 0x80000001, 0x5, 0x8, 0x1ff, 0x0, 0x1f, 0x100, 0x1, 0x2e55, 0x7, 0xf57, 0x4, 0x1b6, 0xa12, 0xa0000, 0x1f, 0x8, 0x9, 0x3, 0xa8, 0x0, 0x0, 0x7, 0xa1a, 0x5, 0x3, 0x8, 0x7ff, 0x8, 0x6000000, 0xf0a, 0x8, 0x8, 0x5, 0x0, 0x20, 0x8000, 0xf5a6, 0x4, 0x1, 0x0, 0x7, 0x90000, 0x800, 0x1f, 0x1, 0x1, 0xfffffffc, 0x80, 0x5, 0x1, 0x4, 0x1a, 0x0, 0xff], 0x10, ['batadv0\x00', 'batadv0\x00']}, ["", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x895}, 0xc044800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x990}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) 08:13:14 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) 08:13:14 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3ae}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3, 0xd83d, 0xff9f, 0x5, 0x8e15, 0x5, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x20, 0x80, 0x0, 0x5, 0xfffa, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {}, {0x4, 0x6}, {0x6}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x9}, {0x5}, {0x3}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x400, 0x1, 0x73bb, 0x0, 0xe07d, 0x61, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000540)={0x7, 'team0\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x39fab13293276f61}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4cf, 0x13}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x68}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x240040c4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/48, 0x30, 0x0, &(0x7f0000000a00)=""/29, 0x1d}, &(0x7f0000000a80)=0x40) 08:13:14 executing program 6: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/62) r1 = shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x81, 0x5, 0xffff, 0x9b, 0x8}, &(0x7f0000000080)={0x0, 0x1, 0x101, 0x100, 0x3, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x8001, 0x200, 0x100000001, 0x0, 0x4, 0x4e, 0x355}, &(0x7f0000000140)={r2, r3/1000+10000}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000a40)=""/163) 08:13:14 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:13:14 executing program 2: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x0, 0x10000, 0x400, &(0x7f0000ff0000/0x10000)=nil) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/204) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001100)=""/127) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000001180)=""/106) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x40, 0x4100}, 0x800, 0xfff, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0xeed9}) 08:13:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = memfd_secret(0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfa6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x40}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1ff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x33}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "29705586f2e1d39fe56f25c1dc2c02ff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48841) r2 = pidfd_getfd(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x351}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b858a90}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r5 = syz_open_dev$usbmon(&(0x7f00000006c0), 0x7f, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x62}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000740)=""/136, 0x88) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@aname={'aname', 0x3d, '/\x19'}}, {@cache_fscache}, {@access_any}], [{@subj_user={'subj_user', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@measure}]}}) pipe(&(0x7f0000000cc0)) 08:13:14 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x100}, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/cpuid', 0x40800, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x48081) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x501200, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000480)=""/138, &(0x7f0000000540)=0x8a) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) 08:13:14 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x93f, 0x1df043) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x170}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x106}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000280)) r2 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x61}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0xb0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0xb2}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0xf8, 0x81, 0x1b, @device_a, 0x6, "", 0x3, 0x1c, 0x6, [{{}, @device_a, 0xffffff69}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x20}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast, 0x9}]}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x64, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x80, @broadcast, 0x10001, @device_b, 0x3ff, 0x8001, @device_b, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8086}, 0x6880) write$binfmt_misc(r1, &(0x7f0000001140)={'syz0', "e23b7c1918aa51baf0d1ef7e052455cc42b445d89861161a68780c"}, 0x1f) 08:13:14 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@fast_bss_trans={0x37, 0x8c, {0x80, 0x2, "97473809b8905060590f6607e1b1f91c", "826514be1c4381a9611fd3c6cd44d24a2e0bd1a97e8b514c97c4d2d1c3f2a44e", "8ef65e1b2cf93c94365596ab7f8f87b1995499129303216f147e84030fc89c81", [{0x2, 0x15, "e458ca7c818afc2d37f547cc5675f4e5b04d009ee0"}, {0x1, 0x21, "a8bb9dd986b5be342bf829e7b6585cd7a24cbb48264beb7b8ca3149160e423ab8b"}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc63, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0xc001) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x24c, 0x1e, 0x400000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) socketpair(0x1d, 0x1, 0x4, &(0x7f0000000dc0)) [ 183.679271] Bluetooth: hci4: command 0x0406 tx timeout VM DIAGNOSIS: 08:13:12 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f628ca14dc0 CR3=0000000008a2c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 c3e0c61ef14b029f 0c499b4be1770723 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 375afdebbf381c81 0000000000122948 YMM04=0000000000000000 0000000000000000 d79a7789b87c5245 00000000001356c8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 47806583379a8159 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888028e69ac0 RBX=ffffc90011779130 RCX=ffffffff817bd091 RDX=1ffff110051cd358 RSI=0000000000000008 RDI=ffff888028e69ac0 RBP=dffffc0000000000 RSP=ffff888038ad7aa0 R8 =0000000000000000 R9 =ffff888028e69ac7 R10=ffffed10051cd358 R11=0000000000000001 R12=ffffc90011779ff9 R13=ffff888028e69ac0 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff817bd39a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555566d400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005629b5475090 CR3=000000001d2b6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00000000ffff0000 0000000000000000 YMM02=0000000000000000 0000000000000000 00000000ffff0000 0000000000000000 YMM03=0000000000000000 0000000000000000 7465756c42205d36 39323032342e3835 YMM04=0000000000000000 0000000000000000 636f72703d737361 6c63742030733a74 YMM05=0000000000000000 0000000000000000 3a755f6d65747379 733d747865746e6f YMM06=0000000000000000 0000000000000000 5f6d65747379733a 755f6d6574737973 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 3a38393500007475 6f656d6974207874 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000