ffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004854}, 0x4004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5deb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x45}, 0x841) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:18 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004854}, 0x4004) 15:49:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x98, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5b2789681070be44"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5}, {0x0, 0x2}], "b294530df34ab4b7"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x4}, {0xff}, {0x9, 0x4}, {0x53}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x8c, 0x5}, {0x8, 0x6}, {0x1, 0x6}, {0x40, 0x4}, {0xff, 0x1}, {0x9, 0x7}, {0x6, 0x2}, {0x78, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x3}], "7466bfb86a8737ba"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x6}, {0x1, 0x8}, {0x1f, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x1f, 0x4}, {0x7f}, {0x40, 0x7}, {0x80, 0x3}, {0x8, 0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x1f, 0x3}, {0x4f, 0x2}, {0x9, 0x1}, {0x80, 0x6}, {0x1f, 0x4}, {0x35, 0x4}, {0xf9, 0x5}, {0x2, 0x7}], "a36d7a6b1cc54a1d"}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40840}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:18 executing program 2: read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/75, 0x4b) 15:49:18 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:18 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004854}, 0x4004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:18 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 15:49:18 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) 15:49:18 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) 15:49:18 executing program 2: read$char_usb(0xffffffffffffffff, 0x0, 0x0) 15:49:30 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:49:30 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) 15:49:30 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) 15:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5b2789681070be44"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5}, {0x0, 0x2}], "b294530df34ab4b7"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x4}, {0xff}, {0x9, 0x4}, {0x53}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x8c, 0x5}, {0x8, 0x6}, {0x1, 0x6}, {0x40, 0x4}, {0xff, 0x1}, {0x9, 0x7}, {0x6, 0x2}, {0x78, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x3}], "7466bfb86a8737ba"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:30 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:30 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:30 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 15:49:30 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x0, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:30 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 15:49:30 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:49:30 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}, {&(0x7f0000000540)="4031c7c60bcd42bc3c0e718556498fe2e54999c2065622bbeabfedd461ec139ecdf97a26f9eb2be7e528a18a019cfb59289e89152604a866363ec8177f7fa3d736835d", 0x43}], 0x4, 0x9, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:43 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5b2789681070be44"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5}, {0x0, 0x2}], "b294530df34ab4b7"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:43 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:43 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) 15:49:43 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "6ea97378c8bd18504d85a5c01cbe6227d61cc6fa3e837cb97e678abdb86471b7891c6a8de1a04d48548810db6e90541a9340c27bfc5bb02671f890336c42daa43428c70b7f8467973f67ae8594422a36a31fdd3b936037d04af8e288a4e2d2edc7f63b74918917fefdde56d60e553d2c11e23e80755a2ee04ba2a4a9c89ad6846a1cef7ac4b69bf66bf4b0e205f0009e951469c9910c7c7de771bdc6ee7a6cd5f9f1cf78770285edd36705197b966f8e5def0d6fdbad328f43207614c0638a67649855c0ecac4543955a2dd3ab034797d8ac7a639cb775dc790375450fc34573a45f4114454534cac05c766c5bf6023b7ac28a0ea40ae0a733e2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:49:43 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 15:49:43 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 15:49:43 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5c, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x1, 0x0, {0x100, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5e, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x3, 0x1, 0x0, {0x81, 0xa17, 0x0, 0x135, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x5, 0x1}}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x6}, {0x48, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x1, 0x7, 0x0, {0x7, 0x18c8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x7, 0x4}}, @NL80211_ATTR_SSID={0x8, 0x34, @random="8d11cc30"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:43 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 15:49:43 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:49:43 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 15:49:43 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) 15:49:43 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "5b2789681070be44"}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:43 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:49:43 executing program 4: wait4(0xffffffffffffffff, &(0x7f0000000600), 0x1, &(0x7f0000000640)) 15:49:43 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:58 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}, {&(0x7f0000000440)="e7a16372065532e173127457e415ad51eae5e1985d58acbc6f845ca9578ff02ad903c513de689296cab5765f032fc54b786903b98440382747e42a979ca76dffd7c4c619b445f84867e9dd11e4b0e17a6931453dfb6fe8b298b672efa6d589b2ce38424dec17d954367270a517018557d3d6464d0d84f60db5e26d97c5c88118295535a8acab06a68a759f27ca82e98c1db429dd67dc0857aaa6beac12e896a9807213384fe3f2ceeefa15506ddffc2a9035b84d99092d9d9c70bb1a0d0c7a15ae5f04a9180867", 0xc7}], 0x3, 0x9, 0x0) 15:49:58 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:58 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:49:58 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000640)) 15:49:58 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') 15:49:58 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:49:58 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) [ 2445.060108] audit: type=1400 audit(1661096998.499:8): avc: denied { kernel } for pid=13980 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 15:49:58 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)) 15:49:58 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/mnt\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 15:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:49:58 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {&(0x7f0000000400)="160747151e8788624ee6933550b94d2bdf339793ca32ed56e6f650bd577a5e", 0x1f}], 0x2, 0x9, 0x0) 15:49:58 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:50:12 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:12 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:12 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:50:12 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 15:50:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:12 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}], 0x1, 0x9, 0x0) 15:50:12 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}], 0x1, 0x9, 0x0) 15:50:12 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:50:12 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:50:12 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:50:12 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}], 0x1, 0x9, 0x0) 15:50:25 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:50:25 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:25 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 15:50:25 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:50:25 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="96b59090d5d7aa88626ace97a531f51aa801966266e333ccd01f50aa59a5eb0417afff70f2ef2f810a19632ed8cd4bda5810b39901ec989d9927825ba0b287ec0852392afd8827046a8f456f69bda9185951c86673311353140658dc5f2167f498487d4925f5e39f3285808abeac3e8700e2944d6368bdf32d6fee6194beed88af5e94618cf4a5698357a5381bbcf4ccf2cda76bc3da5415b1a2c43d7b9c2c452ab63dd031b5c828b1ab308e8523a57367707b5474d72d6152c143e47fdb6b8c2bdb526ef089", 0xc6}, {0x0}], 0x2, 0x9, 0x0) 15:50:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:25 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:25 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:25 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1, 0x9, 0x0) 15:50:25 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:50:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:25 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "6ea97378c8bd18504d85a5c01cbe6227d61cc6fa3e837cb97e678abdb86471b7891c6a8de1a04d48548810db6e90541a9340c27bfc5bb02671f890336c42daa43428c70b7f8467973f67ae8594422a36a31fdd3b936037d04af8e288a4e2d2edc7f63b74918917fefdde56d60e553d2c11e23e80755a2ee04ba2a4a9c89ad6846a1cef7ac4b69bf66bf4b0e205f0009e951469c9910c7c7de771bdc6ee7a6cd5f9f1cf78770285edd36705197b966f8e5def0d6fdbad328f43207614c0638a67649855c0ecac4543955a2dd3ab034797d8ac7a639cb775dc790375450fc34573a45f4114454534cac05c766c5bf6023b7ac28a0ea40ae0a733e2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) 15:50:25 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:37 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1, 0x9, 0x0) 15:50:37 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) 15:50:37 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 15:50:37 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:37 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:37 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:37 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "6ea97378c8bd18504d85a5c01cbe6227d61cc6fa3e837cb97e678abdb86471b7891c6a8de1a04d48548810db6e90541a9340c27bfc5bb02671f890336c42daa43428c70b7f8467973f67ae8594422a36a31fdd3b936037d04af8e288a4e2d2edc7f63b74918917fefdde56d60e553d2c11e23e80755a2ee04ba2a4a9c89ad6846a1cef7ac4b69bf66bf4b0e205f0009e951469c9910c7c7de771bdc6ee7a6cd5f9f1cf78770285edd36705197b966f8e5def0d6fdbad328f43207614c0638a67649855c0ecac4543955a2dd3ab034797d8ac7a639cb775dc790375450fc34573a45f4114454534cac05c766c5bf6023b7ac28a0ea40ae0a733e2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:38 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:38 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1, 0x9, 0x0) 15:50:38 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 15:50:38 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 15:50:50 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 15:50:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 15:50:50 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2, 0x9, 0x0) 15:50:50 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:50 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:50 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "6ea97378c8bd18504d85a5c01cbe6227d61cc6fa3e837cb97e678abdb86471b7891c6a8de1a04d48548810db6e90541a9340c27bfc5bb02671f890336c42daa43428c70b7f8467973f67ae8594422a36a31fdd3b936037d04af8e288a4e2d2edc7f63b74918917fefdde56d60e553d2c11e23e80755a2ee04ba2a4a9c89ad6846a1cef7ac4b69bf66bf4b0e205f0009e951469c9910c7c7de771bdc6ee7a6cd5f9f1cf78770285edd36705197b966f8e5def0d6fdbad328f43207614c0638a67649855c0ecac4543955a2dd3ab034797d8ac7a639cb775dc790375450fc34573a45f4114454534cac05c766c5bf6023b7ac28a0ea40ae0a733e2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x28000044}, 0x880) 15:50:50 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 6: process_madvise(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 15:50:50 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:50:50 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) 15:50:50 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:50:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:50:50 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00'}) 15:50:50 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:50:50 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:50:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:50:50 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:02 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) 15:51:02 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:02 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) 15:51:02 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:02 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:14 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x745, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:14 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) 15:51:14 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x130, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xb6]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 15:51:14 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:14 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:15 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) 15:51:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2dd, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:15 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) 15:51:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 15:51:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:15 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 15:51:29 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) 15:51:29 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) 15:51:29 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) 15:51:29 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) 15:51:29 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:29 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:51:29 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:51:29 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:29 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:42 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:42 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "6ea97378c8bd18504d85a5c01cbe6227d61cc6fa3e837cb97e678abdb86471b7891c6a8de1a04d48548810db6e90541a9340c27bfc5bb02671f890336c42daa43428c70b7f8467973f67ae8594422a36a31fdd3b936037d04af8e288a4e2d2edc7f63b74918917fefdde56d60e553d2c11e23e80755a2ee04ba2a4a9c89ad6846a1cef7ac4b69bf66bf4b0e205f0009e951469c9910c7c7de771bdc6ee7a6cd5f9f1cf78770285edd36705197b966f8e5def0d6fdbad328f43207614c0638a67649855c0ecac4543955a2dd3ab034797d8ac7a639cb775dc790375450fc34573a45f4114454534cac05c766c5bf6023b7ac28a0ea40ae0a733e2"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r6 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x100, 0x100) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x80, 0xc, 0x6, 0x701, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 15:51:42 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x140, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) 15:51:42 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) 15:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:51:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 15:51:42 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:42 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:42 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:51:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:51:42 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) 15:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:51:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) 15:51:43 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:43 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) 15:51:43 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:51:43 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:52:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 15:52:00 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) socketpair(0x26, 0x1, 0x5, &(0x7f0000000d40)) 15:52:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:52:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:00 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:52:00 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) 15:52:00 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:52:00 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:00 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 15:52:01 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) 15:52:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:12 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "2a763538a1baf4376b3973404c0b48abf5c16d2061e1780a7af54c33ac802f328aedb602151ab51cdd1bda6b0e70c1a3c16ca615ef383be8710e2999b6a9a4d80d53ffab69a2cfb4fb42a3c5b302bcbbe03d0d319f7653e8da1b023b1115107ae000ea3704495d95530ef37f3fff9e937f4c7de4786ce506d2d59ae070f4a2d85ac37a2e655cc08dfbe7ec52afea669b915e6b731c0456aa2f0a3052037288c4e9397916f9282b68ff122128c998bd2c1d7a900463a9a5f1a697f5161e179f94c1ee40f752000a00ebdc1bde9cc1281f9e7089e2143343c22d2612296b9c7eb6b3645d207f5bc881dd552fc5d6a39f53689875835401f739f3ea4c876322"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) 15:52:12 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:12 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:12 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) 15:52:12 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:13 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) 15:52:13 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:13 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) 15:52:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:25 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:25 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) 15:52:25 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:25 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) 15:52:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) 15:52:25 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:25 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "cc191ffbe94c5495b2fd55d7429f3ae1e9a69b7e1a3300e5c29e149f73ceaac93ca376800da3e9d8b140636e89ac177b1eff2e515858246da75374e5f5b9629d8b82c3a8b82ad9dc4dea432edc9fcb9d7ce8e73f900304beec1c3e97a47968f5f58e4f60a6e78838420c0f2b0d0bbda17a491c7861735148a4242540dc520f71cf2089f5fca900cb2756f6bd18ce0b4465f1b6e8e64f1c11cd3baf09445f2d1c1443b3e26e28f4ea19f85b2b3eb9328f78bdc41854eb4083f5dcc02ba4a0557a617537fa3eabb5c3e2a4ae5443b23a1bcd50851dd82e5b5a16da43585bb41398cb0f034ee95cc2ae6f71abee7f137f43a4ee3cbe32beb73eb52307abf03a"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xffff, 0x5]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000cc0}, 0x4800) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:25 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:25 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) 15:52:25 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:25 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:26 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:52:26 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:26 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:38 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:38 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:38 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:38 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:38 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:38 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:52:38 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:38 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:52:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:38 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:38 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:52:54 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:52:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:54 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:54 executing program 7: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:54 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600088d1}, 0x4000) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:52:54 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:52:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:52:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:52:54 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:52:54 executing program 2: r0 = syz_open_dev$vcsn(0x0, 0x4d3, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:53:05 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:53:05 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:53:05 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40041) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:05 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x0, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:53:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:53:05 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x358, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x74, 0x115, "e96bddf266d83a40e83bda0ee7aa99fd61d2aa3036fd8e756dc35cb1eef6eb9b86444b636462bc2eb9c3362ca1823c722af02728957f8a69dad8a2fd50caab8ec45317837d13bb5fe70dfb47370f454c35a94ccf61994be2e17d53079b45d7917d48e28e5f116cc99c9bf8d3eb606cb2"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x1ff, 0x7f, 0x1, 0xe0}}}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac08, 0xfac02, 0xfac02, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:05 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x0, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:53:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:05 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:53:05 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:05 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:53:05 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:53:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x0, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:53:05 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:05 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x298, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="13f94d8d0c89", {0x1, 0x7}}, 0x17, @val={0x8c, 0x18, {0xdf6, "991bbf5640d8", @long="29586b50c0b05c359744dcef60aa1426"}}}}, @NL80211_ATTR_FRAME={0x237, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x5, 0x3f}}, @ver_80211n={0x0, 0x81, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x44}, [{0xdd, 0x47, "9d867b3a4bcd02a0abf9ebb1e3dd0f532ebe987bbe54998e7bb918498562d98f11f3bdfa55de19f88256410e6ed38dfeba070e3044dc1f226c7a2a85dceeaab19e80ee9fcc3846"}, {0xdd, 0xec, "fcb268c5ddf7793be2b02ef55d6d72240d1f892ed22f9a9d16421b6b55872effae4d4831136090635952553d40fac9747172e4257f0ff5a845908b3fed2847014af8eeddc958f78d480b62e3dcaed731e4fdb34a4460c331a5eff0b3d4043dbdfbe55406292a31401977d9f22a4fb867840fd731c4e9501a0cd498a0860a7962bb7149d9e41c78b3f7049b9b2d29e87ac0a082252a5dfa82b5accf10f416d2f71ae60828e1f4fed976777000617e43ba9e23966233a496987751b1bf12acdbceb4926c1b058aee22f9ce94df5474bbdd9f4ec4ec44dc14363df9db00b583092945a7d49071bc9b611a095e09"}, {0xdd, 0xd5, "8b85ed1ed7eca3a11ec358c58e53b499157b3fc96d57bca2d3a388dc61e9fcbb095ba15296be2233c760fb902f8adaebe0c9c4ef1f2f0e122c4ce06e97cdec92599bb459fcbd9c58d159fca7e2d1bff24e707145c9f148f3ec8f8ce7180a17a0b7e0eddd968aeaa38cbba0c28ff966c3a254f8f601d850ea38f3623c00ab65821c5925efbb6cec73436a6680218b03f5f8924da786cae0a9a65ae44b8f594134d1ce0b31fa3519b4bd90e66546b053ff5836209892a2a69551f7880509a9ec9e170ccb810605bc74fd93d13261368e668cae13877a"}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x24044000}, 0x20040080) r1 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:05 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:53:19 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:19 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:53:19 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:19 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:19 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 15:53:19 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00'}) 15:53:19 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:32 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:53:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) syz_io_uring_complete(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:32 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 15:53:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:32 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1f, 0xa024, 0xfff, 0x80000001, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:53:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:53:32 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:53:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 15:53:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:53:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "8bc8af47869cf7fd89f752b758338fd67d25665fbd8b887a0bd52a86d67e3483"}, @NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "da88"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}]}, 0x18}}, 0x40004) socketpair(0x6, 0x5, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eaf1c0a9d334c51b302c3ad47ec91464e2e89fe6298d5d1c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0a75e924846694c2ed35d97314a213b4cfcc8262dbd8be9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec975260a0e4db13ffa4aaf48e2da601698bb584c30986ac"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "285b1b33c22a49c7281d6f0a8cf1012f5422c9e49b409aaa"}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000d80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000740)={0x5e4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0x1b, 0x16, 0x6c, 0x12, 0x36, 0x1, 0x48, 0x18, 0x5, 0x18, 0x60, 0x9, 0x9, 0x16, 0xc, 0x0, 0x16, 0x48, 0x3, 0x1, 0x60, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xffc0, 0x3, 0x8001, 0x6, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0xb, 0x9, 0x60, 0x24, 0x16, 0x1, 0xc, 0x3, 0xc, 0xc, 0x18, 0x36, 0x4, 0x24, 0x23, 0x18, 0x16, 0x4, 0x5, 0x48, 0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x3, 0x1, 0x6, 0x60, 0x2, 0x20d6d55d266e1fe9]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xe88e, 0x6, 0xff, 0x6, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x3, 0x2, 0x4, 0x2, 0x36, 0x36, 0x30, 0xb, 0x3, 0x9, 0x1, 0x2, 0x6, 0x3, 0x24, 0x5, 0x5, 0x36, 0x1, 0x0, 0x36, 0x48, 0x3, 0x12, 0x1, 0x9, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x3ff, 0x9, 0x1, 0x7fff, 0x4, 0x3]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x1c}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0xc, 0x1, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x2, 0x2, 0xc, 0x1b, 0xa947f247e8c2bb55, 0x16, 0x4, 0x5, 0x21, 0x37, 0x30, 0x5, 0x12, 0x60, 0x60, 0xb, 0xc, 0x30, 0x78, 0x3, 0x5, 0xc, 0x9, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c0, 0x11d, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x1, 0x18, 0x1b, 0x5, 0x1b, 0x0, 0x4, 0x60, 0x6, 0x30, 0x2, 0x65, 0x18, 0x14, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x85a7, 0xeb5, 0x74, 0x1ff, 0x3, 0x20]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x9, 0xb, 0x1, 0x5c, 0x0, 0x1, 0x5, 0x12, 0xc, 0x30, 0x9, 0x16, 0x1, 0x30, 0x24, 0x4, 0x1, 0x4, 0x24, 0x24, 0x36, 0x3, 0x18, 0x60, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x81, 0x8, 0x1ff, 0x7, 0x400, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0x81, 0x3f, 0x7ff, 0xfff, 0x1]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x3, 0x5, 0x7f, 0x2, 0x100, 0x1f]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x7}, {0x6, 0x4}, {0x6}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x5, 0xc4, 0x0, 0x20, 0x7ff, 0x7fff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x16, 0x9, 0x1b, 0x5, 0x36, 0x2, 0x12, 0x9, 0x18, 0x5a]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3b, 0x12, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x4, 0xe50, 0x9, 0x8, 0x2, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff8, 0x0, 0x9, 0x8, 0x1, 0x81, 0x2]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x6}, {0x1, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x1}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6, 0xb, 0xb, 0x0, 0x12, 0x48, 0x60, 0xc, 0x3, 0x1, 0x30, 0x16, 0x5, 0x25, 0x9, 0x6c, 0x36, 0x12, 0x30, 0x5, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x9, 0x6c, 0x32, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1802, 0x2, 0x9, 0x1, 0x3ff, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0xc, 0x12, 0x18, 0x6c, 0x12, 0x2, 0x6c, 0x4, 0x3, 0x60, 0x6c, 0x48, 0x51, 0x12, 0x6, 0x36, 0x4, 0x6c, 0x1d, 0x1, 0x12, 0x24, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4}, 0x2000c090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r11 = syz_open_dev$vcsn(&(0x7f0000001080), 0xc1b0, 0xa002) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_FRAME={0x6a, 0x33, @ctrl_frame=@bar={{}, {0x3}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x6, {0x2, 0x1}, "729f4b5fd3504030"}, {0x0, 0x1, {0x2, 0xf3}, "981507bdf9440141"}, {0x0, 0x9, {0xa, 0x6}, "530e72ebffee52bb"}, {0x0, 0x5, {0x5, 0x8}, "7c1436c8f7b4545a"}, {0x0, 0x4, {0x4, 0xece}, "d55adb07cebc2e4a"}, {0x0, 0x6, {0x9, 0xff}, "212892b40344316e"}, {0x0, 0x2, {0xf, 0x1}, "dccdabb5c080e7cc"}]}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 15:53:32 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x840) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x2000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff127}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe37126c3758b90b4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x505, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000004) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x5999, &(0x7f0000002280)={0x0, 0x57dc, 0x1, 0x1, 0x2bb}) 15:53:32 executing program 7: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 0: r0 = syz_open_dev$vcsn(0x0, 0x4d3, 0x200000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x28048000) 15:53:32 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 15:53:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 15:53:32 executing program 2: syz_open_dev$vcsn(&(0x7f0000000bc0), 0x4d3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) 15:53:33 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (fail_nth: 1) [ 2659.637606] FAULT_INJECTION: forcing a failure. [ 2659.637606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2659.638700] CPU: 1 PID: 14921 Comm: syz-executor.1 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2659.639310] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 [ 2659.639907] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 14921, name: syz-executor.1 [ 2659.640539] preempt_count: 0, expected: 0 [ 2659.640845] RCU nest depth: 0, expected: 0 [ 2659.641151] 1 lock held by syz-executor.1/14921: [ 2659.641507] #0: ffff88800f0f9268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 2659.642149] irq event stamp: 258 [ 2659.642403] hardirqs last enabled at (257): [] __up_console_sem+0x78/0x80 [ 2659.643041] hardirqs last disabled at (258): [] dump_stack_lvl+0x2e/0xb3 [ 2659.643658] softirqs last enabled at (252): [] __irq_exit_rcu+0x11b/0x180 [ 2659.644300] softirqs last disabled at (221): [] __irq_exit_rcu+0x11b/0x180 [ 2659.644940] CPU: 1 PID: 14921 Comm: syz-executor.1 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2659.645628] syz-executor.1[14921] cmdline: /syz-executor.1 exec [ 2659.646073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2659.646929] Call Trace: [ 2659.647141] [ 2659.647315] dump_stack_lvl+0x8b/0xb3 [ 2659.647607] __might_resched.cold+0x222/0x26b [ 2659.647958] down_read_killable+0x75/0x490 [ 2659.648307] ? down_read_interruptible+0x490/0x490 [ 2659.648703] __access_remote_vm+0xac/0x6f0 [ 2659.649040] ? follow_phys+0x2c0/0x2c0 [ 2659.649361] ? do_raw_spin_lock+0x121/0x260 [ 2659.649697] ? rwlock_bug.part.0+0x90/0x90 [ 2659.650019] ? lock_release+0x3b2/0x750 [ 2659.650342] ? __up_console_sem+0x47/0x80 [ 2659.650674] get_mm_cmdline.part.0+0x214/0x600 [ 2659.651188] ? dname_to_vma_addr.isra.0+0x360/0x360 [ 2659.651580] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 2659.652388] get_task_cmdline_kernel+0x1e9/0x230 [ 2659.652775] dump_stack_print_cmdline.part.0+0x82/0x150 [ 2659.653495] ? _atomic_dec_and_lock_irqsave+0x150/0x150 [ 2659.653915] ? __wake_up_klogd.part.0+0xc5/0xf0 [ 2659.654336] ? dump_stack_print_info+0xc6/0x190 [ 2659.654730] dump_stack_print_info+0x185/0x190 [ 2659.655097] dump_stack_lvl+0x7f/0xb3 [ 2659.655423] should_fail.cold+0x5/0xa [ 2659.655733] _copy_to_user+0x2a/0x140 [ 2659.656042] simple_read_from_buffer+0xcc/0x160 [ 2659.656423] proc_fail_nth_read+0x198/0x230 [ 2659.656768] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2659.657172] ? security_file_permission+0xb1/0xe0 [ 2659.657566] vfs_read+0x253/0x930 [ 2659.657853] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2659.658260] ? kernel_read+0x1c0/0x1c0 [ 2659.658583] ? __fget_files+0x270/0x450 [ 2659.658917] ksys_read+0x127/0x250 [ 2659.659233] ? __ia32_sys_pwrite64+0x220/0x220 [ 2659.659596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.659999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.660418] do_syscall_64+0x3b/0x90 [ 2659.660714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2659.661138] RIP: 0033:0x7f9b2261169c [ 2659.661427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2659.662804] RSP: 002b:00007f9b1fbd4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2659.663383] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9b2261169c [ 2659.663914] RDX: 000000000000000f RSI: 00007f9b1fbd41e0 RDI: 0000000000000003 [ 2659.664463] RBP: 00007f9b1fbd41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.664999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2659.665552] R13: 00007ffd07283cbf R14: 00007f9b1fbd4300 R15: 0000000000022000 [ 2659.666102] [ 2659.687222] syz-executor.1[14921] cmdline: /syz-executor.1 exec [ 2659.688416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2659.690079] Call Trace: [ 2659.690518] [ 2659.690868] dump_stack_lvl+0x8b/0xb3 [ 2659.691497] should_fail.cold+0x5/0xa [ 2659.692082] _copy_to_user+0x2a/0x140 [ 2659.692699] simple_read_from_buffer+0xcc/0x160 [ 2659.693437] proc_fail_nth_read+0x198/0x230 [ 2659.694082] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2659.694879] ? security_file_permission+0xb1/0xe0 [ 2659.695637] vfs_read+0x253/0x930 [ 2659.696204] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2659.696941] ? kernel_read+0x1c0/0x1c0 [ 2659.697574] ? __fget_files+0x270/0x450 [ 2659.698229] ksys_read+0x127/0x250 [ 2659.698784] ? __ia32_sys_pwrite64+0x220/0x220 [ 2659.699517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.700346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.701170] do_syscall_64+0x3b/0x90 [ 2659.701763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2659.702587] RIP: 0033:0x7f9b2261169c [ 2659.703194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2659.705828] RSP: 002b:00007f9b1fbd4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2659.706992] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9b2261169c [ 2659.708087] RDX: 000000000000000f RSI: 00007f9b1fbd41e0 RDI: 0000000000000003 [ 2659.709184] RBP: 00007f9b1fbd41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.710271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2659.711350] R13: 00007ffd07283cbf R14: 00007f9b1fbd4300 R15: 0000000000022000 [ 2659.712462] VM DIAGNOSIS: 15:53:33 Registers: info registers vcpu 0 RAX=fffffbfff0d946f8 RBX=fffffbfff0d946f9 RCX=ffffffff81297b2a RDX=ffff7fffffffffff RSI=0000000000000008 RDI=ffffffff86ca37c0 RBP=fffffbfff0d946f8 RSP=ffff8880369df418 R8 =0000000000000000 R9 =ffffffff86ca37c7 R10=fffffbfff0d946f8 R11=0000000000000001 R12=ffff888037263600 R13=ffff888037263ff0 R14=ffffffff85405460 R15=0000000000020000 RIP=ffffffff81788cef RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555557266c58 CR3=000000001d018000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8240add1 RDI=ffffffff8762a6c0 RBP=ffffffff8762a680 RSP=ffff88800f5b71a8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000069 R11=0000000000000001 R12=0000000000000069 R13=ffffffff8762a680 R14=0000000000000010 R15=ffffffff8240adc0 RIP=ffffffff8240ae29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9b1fbd4700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9b1fbd3f78 CR3=0000000035cd0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000