, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:01:50 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:01:50 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:01:50 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:01:50 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:01:50 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:03 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)

06:02:03 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r1, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)

06:02:03 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:03 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:03 executing program 1:
iopl(0x81)
iopl(0x0)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:03 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:03 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:03 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:03 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:03 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:04 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)

06:02:04 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r1, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)

06:02:04 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:04 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:04 executing program 1:
iopl(0x81)
iopl(0x0)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:04 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:16 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(0x0, 0x80800)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:16 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:16 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:16 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:16 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)

06:02:16 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:16 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r1, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)

06:02:16 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:16 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0))

06:02:16 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)

06:02:16 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(0x0, 0x80800)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:28 executing program 2:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:28 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)

06:02:28 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(0x0, 0x80800)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:28 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:28 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r1, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)

06:02:28 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 2:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:28 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))

06:02:28 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 2:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:28 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r1, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1)

06:02:28 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

06:02:28 executing program 2:
r0 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:28 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:28 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

06:02:28 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:40 executing program 2:
r0 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:40 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:40 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0))

06:02:40 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)

06:02:40 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:40 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r0, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:02:40 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:40 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:40 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:40 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)

06:02:40 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x1)
write$P9_RREADLINK(r0, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:02:40 executing program 2:
r0 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r2, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r3=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:40 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:40 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:40 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
socket$nl_generic(0x10, 0x3, 0x10)

06:02:40 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:40 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:40 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f00000005c0))
write$P9_RREADLINK(r0, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:02:54 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:54 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:54 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:02:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:54 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:02:54 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)

06:02:54 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r3 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:54 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:54 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x80800)
getpid()

06:02:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:02:54 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:02:54 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:55 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:02:55 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:02:55 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:02:55 executing program 3:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x80800)

06:03:07 executing program 3:
iopl(0x0)
iopl(0x7)
fork()

06:03:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:07 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:07 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:03:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:07 executing program 3:
iopl(0x0)
iopl(0x7)

06:03:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:07 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:07 executing program 3:
iopl(0x0)

06:03:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:07 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:07 executing program 7:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r3 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002b00)=[r3, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)

06:03:21 executing program 7:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r3 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002b00)=[r3, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)

06:03:21 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:21 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:21 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:21 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:21 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x0, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:21 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:21 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:21 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_io_uring_complete(0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:21 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:22 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:34 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:34 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x0, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:34 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:34 executing program 7:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r3 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002b00)=[r3, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)

06:03:34 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:34 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:34 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:34 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:34 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:34 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:34 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x0, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:34 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:34 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x341401)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:34 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:34 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:35 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:46 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:46 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:46 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:46 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:46 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x0, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:46 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:03:46 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))

06:03:46 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:47 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:47 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))

06:03:47 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:47 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:47 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:47 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:47 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:47 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:59 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:03:59 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:59 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:03:59 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:03:59 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:03:59 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:03:59 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))

06:03:59 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:03:59 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:00 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:00 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0x0, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:00 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:00 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:00 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:00 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:00 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:00 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:04:16 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0x0, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:16 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:16 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680), 0x80000)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:16 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:16 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:16 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:16 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0x0, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:16 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:16 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:16 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:16 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, 0x0, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:16 executing program 7:
r0 = syz_io_uring_setup(0x5082, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:04:16 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:16 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:29 executing program 7:
r0 = syz_io_uring_setup(0x5082, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:04:29 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:29 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:29 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x0, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:29 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:29 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:29 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:29 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, 0x0, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:29 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:29 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:29 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:29 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:42 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x0, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:42 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:42 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:42 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:42 executing program 7:
r0 = syz_io_uring_setup(0x5082, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:04:42 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:42 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, 0x0, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:42 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:42 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:42 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:42 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x0, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:42 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:42 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:42 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:42 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:42 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:42 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:56 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:56 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:56 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:56 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:56 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:56 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:56 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:04:56 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:56 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:56 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:56 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:56 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:04:56 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:04:56 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:04:56 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:04:56 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:04:56 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:14 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:14 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:14 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:14 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:14 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:05:14 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:14 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:14 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:14 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:14 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:14 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:14 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:14 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:26 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:26 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:26 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:26 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:26 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:05:26 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:26 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:26 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:26 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:26 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:27 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:27 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:27 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:27 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:27 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

[  757.046684] cgroup: fork rejected by pids controller in /syz5
06:05:27 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(0x0, 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:27 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:27 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:27 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x0, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:05:27 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:27 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:41 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:41 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:41 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x0, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:05:41 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:41 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:41 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:41 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:41 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:41 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:54 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x0, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:05:54 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:54 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:54 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:54 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:54 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000), 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:05:54 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:05:54 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:05:54 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:05:54 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, 0x0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:07 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:07 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x0, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:07 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, 0x0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:07 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, 0x0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:07 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680), 0x80000)
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r0=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:08 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x0, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:08 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:08 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:22 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x0, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:22 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:22 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:22 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:22 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:22 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 5:
iopl(0x81)
iopl(0x7)
fork()
r0 = getpid()
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r0, 0x1, ','}}, 0x1f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:22 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:22 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:22 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:22 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:22 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340), 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:22 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:22 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, 0x0, 0x0)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:22 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:22 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:37 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:37 executing program 5:
iopl(0x81)
iopl(0x7)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:37 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:37 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:37 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:37 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:37 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:37 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340), 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

[  827.249213] Zero length message leads to an empty skb
06:06:37 executing program 5:
iopl(0x81)
iopl(0x7)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:37 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:52 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000002b00)=[r6, r6, r7, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:06:52 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340), 0xc, &(0x7f0000000880)={&(0x7f0000000380)={0x4f0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x7ff, 0xfffb, 0x8001, 0x81, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x7b, 0x339c36f13f54edd7, 0x60, 0x18, 0x48, 0x4, 0x24, 0x12, 0x1b, 0x12, 0x1, 0x16, 0x30, 0x30, 0x6, 0x30, 0x60, 0x24, 0x5, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x7, 0x3, 0x8001, 0x5, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x4}, {0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0x3, 0x4, 0x7, 0xfff8, 0x1f, 0x81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1b, 0x2, 0xb, 0x16, 0x18, 0x6c, 0x5]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x36, 0x0, 0x36, 0x36, 0x6, 0x5, 0x6, 0x6c, 0x12, 0xb, 0x24, 0x7b, 0xb, 0x48, 0x1, 0xa, 0x1, 0xb, 0x6c, 0x16, 0x5, 0xc, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x48, 0x12, 0x3, 0x16, 0xc, 0x6c, 0x5, 0x60, 0x24, 0xb, 0xc, 0x9, 0x48, 0x36, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x1f}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3954, 0x3d, 0x2a8b, 0x1f, 0x3ff, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x810, 0x100, 0x0, 0x4, 0xc15, 0x1ff, 0xfffc, 0x9]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x9, 0x9, 0x18, 0xc, 0x0, 0x18, 0x30, 0x2, 0x4, 0x3, 0x30, 0x1, 0x36, 0x3, 0x1b, 0xc, 0x1, 0x5, 0xc, 0x24, 0x12, 0x6, 0xe5257ee64a3fa66, 0xc, 0x6, 0x6, 0x36, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x26, 0x9, 0x4, 0x3, 0x60, 0x12]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0xc}, {0x3, 0x8}, {0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x4, 0xb, 0x2cd591f44f72d196, 0x1b, 0x17, 0xc, 0x1b, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x18, 0x1b, 0x1b, 0x30, 0x9, 0x60, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x63, 0x6c, 0x30, 0x36, 0x9, 0xc, 0x2, 0x30, 0x30, 0xf1d614cc0abbf91d, 0x30, 0x1b, 0xc, 0x6, 0x48, 0x6c, 0x48, 0x60, 0x24, 0x16, 0x9, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xfae, 0x6, 0x7, 0x1b28, 0xfff8, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xae75, 0x40, 0x81, 0x7f00, 0xfe77, 0x7fff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x800, 0x4, 0x6, 0x0, 0x7f, 0x100, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x18c, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0xb, 0x6, 0x4, 0x18, 0x2, 0xc, 0x30, 0x36, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x71, 0x4, 0x1b, 0x12, 0x3, 0x0, 0x36, 0x36, 0x3, 0x1b, 0x18, 0xc, 0x60, 0x60, 0x1b, 0x4, 0x48, 0x48, 0x16, 0x48, 0x4, 0x6c, 0xc, 0x1b, 0x4, 0x1, 0x1, 0x1b, 0x2, 0x6c, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {0x2, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ca9, 0x7fff, 0x7, 0x9, 0x7ff, 0x1, 0xf001, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:52 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:52 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:06:52 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:52 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:06:52 executing program 5:
iopl(0x81)
iopl(0x7)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:52 executing program 3:
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:52 executing program 3:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:52 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:06:52 executing program 5:
iopl(0x81)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:06:53 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x81, 0x75, 0x0, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:06:53 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 5:
iopl(0x81)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:07:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:07 executing program 3:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 3:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000840))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:07 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:07 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 5:
iopl(0x81)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:07 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:07 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:07 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:07:19 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:19 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000000c0)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:07:19 executing program 5:
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:19 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x46, 0x75, 0x1, {0x3b, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf74999946"}}, 0x46)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:19 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:19 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000840))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:19 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:19 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x5}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:19 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x46, 0x75, 0x1, {0x3b, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf74999946"}}, 0x46)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:19 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000840))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:19 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:19 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={0x0}}, 0x20000080)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:19 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:19 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(0x0, 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:19 executing program 5:
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:19 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x46, 0x75, 0x1, {0x3b, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf74999946"}}, 0x46)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:34 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:34 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:34 executing program 5:
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:34 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={0x0}}, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:34 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:34 executing program 7:
r0 = syz_io_uring_setup(0x5082, &(0x7f0000000000)={0x0, 0x3e6f, 0x1, 0x2, 0x2f9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x3, 0x0, 0x8, 0xa}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xd9, 0x4e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x60854)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)=0x8, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc841}, 0x80)
r5 = syz_io_uring_complete(r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000002b00)=[r5, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6)

06:07:34 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x64, 0x75, 0x1, {0x59, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a1"}}, 0x64)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:34 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

06:07:34 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:34 executing program 5:
iopl(0x0)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xffff, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:34 executing program 0:
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "58a76aae6517af904808671666346b63"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ea169f9286d8"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eec623e6effe"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={0x0}}, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40c2013, 0xffffffffffffffff, 0x8000000)
syz_io_uring_complete(r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x200, 0x0)
write$rfkill(r2, &(0x7f0000000980)={0x6, 0x4, 0x2, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0))

06:07:34 executing program 1:
iopl(0x81)
iopl(0x7)
fork()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0x0, 0xff, r1, 0x1, ','}}, 0x1f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48810}, 0x20000080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x6, 0xfffff801, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x88dc2d5fc468cde4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff7fff, 0x11}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@perr={0x84, 0x82, {0x81, 0x8, [@ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x8000, "", 0xe}, @not_ext={{}, @device_a, 0x3, "", 0x1b}, @ext={{}, @broadcast, 0x9, @broadcast, 0xf}, @not_ext={{}, @broadcast, 0x0, "", 0x32}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8, "", 0x18}, @ext={{}, @broadcast, 0xe1, @device_a, 0x42}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0xa2, 0x2a, 0x148a}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x57, {0x6, 0x1, "d8bf43af6c738d086ae098cc747682b9", "8feb80f342426611afc4152530b306e05c584ba870e46bd806eb8ab1a6c70301", "2b9b357b930778e163cc1910c4367647f6433e054ee7cc2b8c09fbafe92d5629", [{0x3, 0x3, "c57594"}]}}, @mesh_chsw={0x76, 0x6, {0x3f, 0x8, 0x19, 0x400}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000080)
iopl(0x3c)
r4 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x8, 0x7d5e, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20008800)
openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x161040, 0x0)

06:07:34 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r0, &(0x7f00000006c0)={0x64, 0x75, 0x1, {0x59, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a1"}}, 0x64)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r1=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:34 executing program 4:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0xb, 0x75, 0x1}, 0xb)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)

06:07:34 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x341401)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_io_uring_complete(0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RREAD(r1, &(0x7f00000006c0)={0x81, 0x75, 0x1, {0x76, "c8928fe7d45a99b464ecc62f1d14d1f78c6da581784d2f457d2eca2aa886961a3fa26d1ffea887c4474f7b3d6e284cd68d90bdda62aaaf7499994645a4ef17c2f6b78fa79748542d960e6ca664d7832262e1768535e229e2a166c0ff1afc6ae07d86227920f25fb81707f7c0f050cbb70a0753e69641"}}, 0x81)
syz_io_uring_setup(0x353f, &(0x7f0000000780)={0x0, 0x67a4, 0x10, 0x2, 0x158}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800)=<r2=>0x0, &(0x7f0000000840))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40000041, 0x0, {0x1}}, 0xffffffc0)

06:07:34 executing program 6:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket(0x0, 0x0, 0x9)
openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x0, 0x300, 0x761d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xed18, 0x43}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x7, 0x6]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2}}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000bc0))

[  885.129922] ==================================================================
[  885.130969] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[  885.131857] Read of size 8 at addr ffff88802c11cd98 by task syz-executor/16623
[  885.132826] 
[  885.133060] CPU: 1 PID: 16623 Comm: syz-executor Not tainted 6.0.0-rc2-next-20220826 #1
[  885.134086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  885.135577] Call Trace:
[  885.135920]  <TASK>
[  885.136222]  dump_stack_lvl+0x8b/0xb3
[  885.136739]  print_report.cold+0x5e/0x5e5
[  885.137298]  ? __lock_acquire+0x42c9/0x5e70
[  885.137882]  kasan_report+0xb1/0x1c0
[  885.138409]  ? __lock_acquire+0x42c9/0x5e70
[  885.138996]  __lock_acquire+0x42c9/0x5e70
[  885.139585]  ? lock_chain_count+0x20/0x20
[  885.140353]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  885.141618]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  885.142707]  ? finish_task_switch.isra.0+0x22d/0x8a0
[  885.143421]  lock_acquire+0x1a2/0x530
[  885.143960]  ? kmemleak_scan+0x21d/0x16f0
[  885.144552]  ? lock_release+0x750/0x750
[  885.145113]  ? mark_held_locks+0x9e/0xe0
[  885.145680]  ? call_rcu+0x589/0xa30
[  885.146192]  ? call_rcu+0x589/0xa30
[  885.146710]  ? _raw_spin_lock_irq+0x41/0x50
[  885.147319]  _raw_spin_lock_irq+0x32/0x50
[  885.147892]  ? kmemleak_scan+0x21d/0x16f0
[  885.148478]  kmemleak_scan+0x21d/0x16f0
[  885.149053]  ? paint_ptr+0xc0/0xc0
[  885.149575]  ? strncpy_from_user+0x204/0x3e0
[  885.150212]  kmemleak_write+0x570/0x680
[  885.150786]  ? kmemleak_scan+0x16f0/0x16f0
[  885.151374]  ? debugfs_file_get+0x1ce/0x450
[  885.151968]  ? debugfs_file_put+0xd0/0xd0
[  885.152553]  full_proxy_write+0x11d/0x190
[  885.153120]  vfs_write+0x2cb/0xd90
[  885.153629]  ? full_proxy_poll+0x180/0x180
[  885.154201]  ? __ia32_sys_pread64+0x220/0x220
[  885.154814]  ? lock_release+0x3b2/0x750
[  885.155367]  ? __up_read+0x192/0x730
[  885.155885]  ? handle_mm_fault+0x6fd/0xa20
[  885.156481]  ? up_write+0x480/0x480
[  885.157002]  ? __fget_light+0x212/0x280
[  885.157562]  ksys_write+0x127/0x250
[  885.158078]  ? __ia32_sys_read+0xb0/0xb0
[  885.158680]  ? syscall_enter_from_user_mode+0x1d/0x50
[  885.159401]  ? syscall_enter_from_user_mode+0x1d/0x50
[  885.160115]  do_syscall_64+0x3b/0x90
[  885.160642]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  885.161348] RIP: 0033:0x7f01bc2535c3
[  885.161854] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[  885.164296] RSP: 002b:00007ffc6d9e72c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  885.165328] RAX: ffffffffffffffda RBX: 00007ffc6d9e7908 RCX: 00007f01bc2535c3
[  885.166285] RDX: 0000000000000004 RSI: 00007f01bc309ed9 RDI: 0000000000000003
[  885.167243] RBP: 0000000000000002 R08: 0000000000000374 R09: 00007ffc6d9ed080
[  885.168214] R10: 00007ffc6d9ed090 R11: 0000000000000246 R12: 00000000fffffff6
[  885.169182] R13: 00007ffc6d9e8ef1 R14: 0000000000000000 R15: 00000000000d7f54
[  885.170144]  </TASK>
[  885.170475] 
[  885.170712] Allocated by task 127:
[  885.171178]  kasan_save_stack+0x1e/0x40
[  885.171733]  __kasan_slab_alloc+0x66/0x80
[  885.172308]  kmem_cache_alloc+0x1b1/0x3e0
[  885.172877]  __create_object.isra.0+0x3d/0xc10
[  885.173517]  kmem_cache_alloc+0x23c/0x3e0
[  885.174097]  __alloc_file+0x21/0x240
[  885.174636]  alloc_empty_file+0x6d/0x170
[  885.175209]  path_openat+0xd4/0x2800
[  885.175745]  do_filp_open+0x1b6/0x410
[  885.176292]  do_sys_openat2+0x171/0x4c0
[  885.176828]  __x64_sys_openat+0x13f/0x1f0
[  885.177380]  do_syscall_64+0x3b/0x90
[  885.177884]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  885.178589] 
[  885.178817] Freed by task 13:
[  885.179226]  kasan_save_stack+0x1e/0x40
[  885.179753]  kasan_set_track+0x21/0x30
[  885.180272]  kasan_set_free_info+0x20/0x40
[  885.180842]  __kasan_slab_free+0x108/0x190
[  885.181406]  kmem_cache_free+0xf7/0x610
[  885.181946]  rcu_core+0x7e2/0x2080
[  885.182435]  __do_softirq+0x1c8/0x8d0
[  885.182954] 
[  885.183186] Last potentially related work creation:
[  885.183823]  kasan_save_stack+0x1e/0x40
[  885.184356]  __kasan_record_aux_stack+0x97/0xb0
[  885.184982]  call_rcu+0x6a/0xa30
[  885.185434]  kmem_cache_free+0xbd/0x610
[  885.185963]  rcu_core+0x7e2/0x2080
[  885.186459]  __do_softirq+0x1c8/0x8d0
[  885.186980] 
[  885.187210] Second to last potentially related work creation:
[  885.187958]  kasan_save_stack+0x1e/0x40
[  885.188492]  __kasan_record_aux_stack+0x97/0xb0
[  885.189109]  call_rcu+0x6a/0xa30
[  885.189566]  kmem_cache_free+0xbd/0x610
[  885.190093]  mas_destroy+0x2cd/0x560
[  885.190607]  mas_store_prealloc+0xf0/0x160
[  885.191156]  __vma_adjust+0xc6f/0x1aa0
[  885.191693]  __split_vma+0x4c3/0x5d0
[  885.192215]  do_mas_align_munmap.constprop.0+0x62d/0x1000
[  885.192952]  do_mas_munmap+0x1e8/0x2b0
[  885.193470]  mmap_region+0x21c/0x1a00
[  885.193981]  do_mmap+0x828/0xf40
[  885.194472]  vm_mmap_pgoff+0x1af/0x270
[  885.195025]  ksys_mmap_pgoff+0x3d0/0x4f0
[  885.195578]  do_syscall_64+0x3b/0x90
[  885.196091]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  885.196792] 
[  885.197027] The buggy address belongs to the object at ffff88802c11cd80
[  885.197027]  which belongs to the cache kmemleak_object of size 368
[  885.198707] The buggy address is located 24 bytes inside of
[  885.198707]  368-byte region [ffff88802c11cd80, ffff88802c11cef0)
[  885.200214] 
[  885.200453] The buggy address belongs to the physical page:
[  885.201191] page:000000004985add9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c11c
[  885.202418] head:000000004985add9 order:1 compound_mapcount:0 compound_pincount:0
[  885.203392] flags: 0x100000000010200(slab|head|node=0|zone=1)
[  885.204175] raw: 0100000000010200 dead000000000100 dead000000000122 ffff888007c4f780
[  885.205177] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[  885.206164] page dumped because: kasan: bad access detected
[  885.206898] 
[  885.207134] Memory state around the buggy address:
[  885.207767]  ffff88802c11cc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  885.208703]  ffff88802c11cd00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  885.209633] >ffff88802c11cd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  885.210570]                             ^
[  885.211116]  ffff88802c11ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  885.212092]  ffff88802c11ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  885.213013] ==================================================================
[  885.213928] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
06:07:35  Registers:
info registers vcpu 0
RAX=0000000080010001 RBX=ffff88806ce2af40 RCX=0000000000000000 RDX=ffff888015ef9ac0
RSI=ffff888018a4f3c8 RDI=ffff88806ce2af40 RBP=ffff888018a4f3c8 RSP=ffff88806ce09dd8
R8 =0000000000000007 R9 =0000000000000000 R10=ffff888018a4f3c8 R11=0000000000000001
R12=000000ce0b326252 R13=ffff888018a4f3c8 R14=dffffc0000000000 R15=0000000000000001
RIP=ffffffff8145bbe7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fecaacf28c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecaa3b6344 CR3=000000000f59a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=8100000000000000 4007
FPR6=8740000000000000 4008 FPR7=8740000000000000 4008
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffff000000000000 ff00000000000000
YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 000000303d524f4e 494d00373d524f4a
YMM05=0000000000000000 0000000000000000 3d5145534b534944 006b7369643d4550
YMM06=0000000000000000 0000000000000000 3d454d414e564544 00303d444955555f
YMM07=0000000000000000 0000000000000000 5953425553003070 6f6f6c2f6b636f6c
YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8244673c RDI=ffffffff87639a20 RBP=ffffffff876399e0 RSP=ffff888044d47210
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001
R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec7393 R15=dffffc0000000000
RIP=ffffffff82446791 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556582400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecaa3b6344 CR3=000000003965e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=f000000000000000 4003
FPR6=ec00000000000000 4004 FPR7=ec00000000000000 4004
YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM01=0000000000000000 0000000000000000 00ff000000000000 00ff00000000ff00
YMM02=0000000000000000 0000000000000000 00ff000000000000 00ff00000000ff00
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000