ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4410: Connection refused ps_root_recvmsgcb: failed to send message to pid 4417: Connection refused ps_root_recvmsgcb: failed to send message to pid 4415: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4458: Connection refused ps_root_recvmsgcb: failed to send message to pid 4457: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4456: Connection refused ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4472: Connection refused [ 106.059012][ T3922] cfg80211: failed to load regulatory.db ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4503: Connection refused ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument Warning: Permanently added '[localhost]:8702' (ECDSA) to the list of known hosts. ps_root_recvmsg: Invalid argument 1970/01/01 00:01:53 fuzzer started ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4474: Connection refused ps_root_recvmsgcb: failed to send message to pid 4473: Connection refused 1970/01/01 00:01:59 dialing manager at 10.0.2.10:35159 1970/01/01 00:02:00 syscalls: 3316 1970/01/01 00:02:00 code coverage: CONFIG_KCOV is not enabled 1970/01/01 00:02:00 comparison tracing: CONFIG_KCOV is not enabled 1970/01/01 00:02:00 extra coverage: CONFIG_KCOV is not enabled 1970/01/01 00:02:00 setuid sandbox: enabled 1970/01/01 00:02:00 namespace sandbox: enabled 1970/01/01 00:02:00 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:02:00 fault injection: enabled 1970/01/01 00:02:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:02:00 net packet injection: enabled 1970/01/01 00:02:00 net device setup: enabled 1970/01/01 00:02:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:02:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:02:00 USB emulation: enabled 1970/01/01 00:02:00 hci packet injection: enabled 1970/01/01 00:02:00 wifi device emulation: enabled 1970/01/01 00:02:00 fetching corpus: 50, signal 93/2091 (executing program) 1970/01/01 00:02:00 fetching corpus: 100, signal 185/4174 (executing program) 1970/01/01 00:02:00 fetching corpus: 150, signal 270/6248 (executing program) 1970/01/01 00:02:00 fetching corpus: 200, signal 345/8302 (executing program) 1970/01/01 00:02:00 fetching corpus: 250, signal 425/10361 (executing program) 1970/01/01 00:02:00 fetching corpus: 300, signal 508/12421 (executing program) 1970/01/01 00:02:00 fetching corpus: 350, signal 587/14464 (executing program) 1970/01/01 00:02:00 fetching corpus: 400, signal 672/16513 (executing program) 1970/01/01 00:02:00 fetching corpus: 450, signal 745/18543 (executing program) 1970/01/01 00:02:00 fetching corpus: 500, signal 824/20579 (executing program) 1970/01/01 00:02:01 fetching corpus: 550, signal 907/22614 (executing program) 1970/01/01 00:02:01 fetching corpus: 600, signal 984/24634 (executing program) 1970/01/01 00:02:01 fetching corpus: 650, signal 1062/26650 (executing program) 1970/01/01 00:02:01 fetching corpus: 700, signal 1140/28665 (executing program) 1970/01/01 00:02:01 fetching corpus: 750, signal 1206/30658 (executing program) 1970/01/01 00:02:01 fetching corpus: 800, signal 1284/32667 (executing program) 1970/01/01 00:02:01 fetching corpus: 850, signal 1352/34657 (executing program) 1970/01/01 00:02:01 fetching corpus: 900, signal 1428/36655 (executing program) 1970/01/01 00:02:01 fetching corpus: 950, signal 1516/38651 (executing program) 1970/01/01 00:02:01 fetching corpus: 1000, signal 1589/40636 (executing program) ps_root_recvmsgcb: failed to send message to pid 4507: Connection refused 1970/01/01 00:02:01 fetching corpus: 1050, signal 1661/42611 (executing program) 1970/01/01 00:02:01 fetching corpus: 1100, signal 1725/44578 (executing program) 1970/01/01 00:02:01 fetching corpus: 1150, signal 1800/46553 (executing program) 1970/01/01 00:02:01 fetching corpus: 1200, signal 1876/48515 (executing program) 1970/01/01 00:02:01 fetching corpus: 1250, signal 1949/50477 (executing program) 1970/01/01 00:02:02 fetching corpus: 1300, signal 2023/52427 (executing program) ps_root_recvmsgcb: failed to send message to pid 4504: Connection refused 1970/01/01 00:02:02 fetching corpus: 1350, signal 2094/54381 (executing program) 1970/01/01 00:02:02 fetching corpus: 1400, signal 2162/56321 (executing program) 1970/01/01 00:02:02 fetching corpus: 1450, signal 2235/58266 (executing program) 1970/01/01 00:02:02 fetching corpus: 1500, signal 2317/60210 (executing program) 1970/01/01 00:02:02 fetching corpus: 1550, signal 2386/62140 (executing program) 1970/01/01 00:02:02 fetching corpus: 1600, signal 2463/64079 (executing program) 1970/01/01 00:02:02 fetching corpus: 1650, signal 2540/66001 (executing program) ps_root_recvmsgcb: failed to send message to pid 4508: Connection refused 1970/01/01 00:02:02 fetching corpus: 1700, signal 2607/66043 (executing program) 1970/01/01 00:02:02 fetching corpus: 1750, signal 2676/66043 (executing program) 1970/01/01 00:02:02 fetching corpus: 1800, signal 2755/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 1850, signal 2833/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 1900, signal 2905/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 1950, signal 2978/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2000, signal 3046/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2050, signal 3117/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2100, signal 3190/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2150, signal 3267/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2200, signal 3332/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2250, signal 3401/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2300, signal 3474/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2350, signal 3551/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2400, signal 3615/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2450, signal 3685/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2500, signal 3752/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2550, signal 3824/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2600, signal 3891/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2650, signal 3957/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2700, signal 4030/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2750, signal 4092/66043 (executing program) 1970/01/01 00:02:03 fetching corpus: 2800, signal 4151/66044 (executing program) 1970/01/01 00:02:03 fetching corpus: 2850, signal 4214/66044 (executing program) 1970/01/01 00:02:03 fetching corpus: 2900, signal 4288/66044 (executing program) 1970/01/01 00:02:03 fetching corpus: 2950, signal 4345/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3000, signal 4409/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3050, signal 4472/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3100, signal 4545/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3150, signal 4619/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3200, signal 4686/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3250, signal 4758/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3300, signal 4823/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3350, signal 4887/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3400, signal 4952/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3450, signal 5014/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3500, signal 5075/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3550, signal 5149/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3600, signal 5209/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3650, signal 5277/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3700, signal 5337/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3750, signal 5409/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3800, signal 5471/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3850, signal 5540/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3900, signal 5600/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 3950, signal 5668/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 4000, signal 5737/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 4050, signal 5811/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 4100, signal 5879/66044 (executing program) 1970/01/01 00:02:04 fetching corpus: 4150, signal 5941/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4200, signal 6014/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4250, signal 6081/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4300, signal 6145/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4350, signal 6206/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4400, signal 6269/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4450, signal 6349/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4500, signal 6414/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4550, signal 6480/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4600, signal 6549/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4650, signal 6612/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4700, signal 6673/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4750, signal 6738/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4800, signal 6800/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4850, signal 6861/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4900, signal 6918/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 4950, signal 6978/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5000, signal 7041/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5050, signal 7106/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5100, signal 7172/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5150, signal 7235/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5200, signal 7295/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5250, signal 7351/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5300, signal 7410/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5350, signal 7466/66044 (executing program) 1970/01/01 00:02:05 fetching corpus: 5400, signal 7527/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5450, signal 7588/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5500, signal 7649/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5550, signal 7717/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5600, signal 7779/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5650, signal 7837/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5700, signal 7901/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5750, signal 7966/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5800, signal 8026/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5850, signal 8086/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5900, signal 8148/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 5950, signal 8217/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6000, signal 8276/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6050, signal 8337/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6100, signal 8391/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6150, signal 8447/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6200, signal 8521/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6250, signal 8587/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6300, signal 8644/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6350, signal 8703/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6400, signal 8767/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6450, signal 8826/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6500, signal 8888/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6550, signal 8951/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6600, signal 9017/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6650, signal 9072/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6700, signal 9136/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6750, signal 9197/66044 (executing program) 1970/01/01 00:02:06 fetching corpus: 6800, signal 9257/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 6850, signal 9319/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 6900, signal 9375/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 6950, signal 9434/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7000, signal 9489/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7050, signal 9551/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7100, signal 9615/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7150, signal 9676/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7200, signal 9738/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7250, signal 9803/66044 (executing program) 1970/01/01 00:02:07 fetching corpus: 7300, signal 9863/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7350, signal 9923/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7400, signal 9981/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7450, signal 10039/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7500, signal 10098/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7550, signal 10157/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7600, signal 10215/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7650, signal 10274/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7700, signal 10333/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7750, signal 10392/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7800, signal 10454/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7850, signal 10517/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7900, signal 10576/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 7950, signal 10639/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 8000, signal 10702/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 8050, signal 10765/66046 (executing program) 1970/01/01 00:02:07 fetching corpus: 8100, signal 10819/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8150, signal 10878/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8200, signal 10937/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8250, signal 11000/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8300, signal 11060/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8350, signal 11117/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8400, signal 11173/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8450, signal 11232/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8500, signal 11284/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8550, signal 11351/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8600, signal 11414/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8650, signal 11480/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8700, signal 11535/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8750, signal 11595/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8800, signal 11650/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8850, signal 11710/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8900, signal 11772/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 8950, signal 11830/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9000, signal 11891/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9050, signal 11947/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9100, signal 12006/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9150, signal 12067/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9200, signal 12127/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9250, signal 12190/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9300, signal 12248/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9350, signal 12310/66046 (executing program) 1970/01/01 00:02:08 fetching corpus: 9400, signal 12371/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9450, signal 12429/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9500, signal 12489/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9550, signal 12551/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9600, signal 12606/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9650, signal 12665/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9700, signal 12725/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9750, signal 12784/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9800, signal 12843/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9850, signal 12903/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9900, signal 12967/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 9950, signal 13028/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10000, signal 13091/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10050, signal 13150/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10100, signal 13208/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10150, signal 13264/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10200, signal 13320/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10250, signal 13374/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10300, signal 13430/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10350, signal 13492/66046 (executing program) 1970/01/01 00:02:09 fetching corpus: 10400, signal 13549/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10450, signal 13605/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10500, signal 13661/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10550, signal 13717/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10600, signal 13775/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10650, signal 13829/66046 (executing program) ps_root_recvmsgcb: failed to send message to pid 4578: Connection refused 1970/01/01 00:02:10 fetching corpus: 10700, signal 13885/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10750, signal 13937/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10800, signal 13998/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10850, signal 14061/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10900, signal 14128/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 10950, signal 14185/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11000, signal 14243/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11050, signal 14297/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11100, signal 14360/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11150, signal 14414/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11200, signal 14470/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11250, signal 14526/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11300, signal 14586/66046 (executing program) 1970/01/01 00:02:10 fetching corpus: 11350, signal 14643/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11400, signal 14703/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11450, signal 14758/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11500, signal 14816/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11550, signal 14886/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11600, signal 14940/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11650, signal 15001/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11700, signal 15057/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11750, signal 15115/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11800, signal 15179/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11850, signal 15230/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11900, signal 15291/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 11950, signal 15353/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12000, signal 15411/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12050, signal 15472/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12100, signal 15530/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12150, signal 15584/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12200, signal 15643/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12250, signal 15699/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12300, signal 15754/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12350, signal 15816/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12400, signal 15880/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12450, signal 15936/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12500, signal 15989/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12550, signal 16048/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12600, signal 16103/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12650, signal 16162/66046 (executing program) 1970/01/01 00:02:11 fetching corpus: 12700, signal 16217/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 12750, signal 16277/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 12800, signal 16339/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 12850, signal 16395/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 12900, signal 16451/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 12950, signal 16514/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13000, signal 16570/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13050, signal 16629/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13100, signal 16685/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13150, signal 16743/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13200, signal 16800/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13250, signal 16854/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13300, signal 16912/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13350, signal 16967/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13400, signal 17026/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13450, signal 17089/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13500, signal 17145/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13550, signal 17200/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13600, signal 17256/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13650, signal 17310/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13700, signal 17366/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13750, signal 17424/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13800, signal 17479/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13850, signal 17534/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13900, signal 17591/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 13950, signal 17651/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 14000, signal 17708/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 14050, signal 17765/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 14100, signal 17819/66046 (executing program) 1970/01/01 00:02:12 fetching corpus: 14150, signal 17875/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14200, signal 17932/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14250, signal 17987/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14300, signal 18048/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14350, signal 18112/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14400, signal 18168/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14450, signal 18220/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14500, signal 18273/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14550, signal 18327/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14600, signal 18390/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14650, signal 18445/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14700, signal 18497/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14750, signal 18555/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14800, signal 18619/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14850, signal 18684/66046 (executing program) 1970/01/01 00:02:13 fetching corpus: 14900, signal 18737/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 14950, signal 18791/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15000, signal 18849/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15050, signal 18908/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15100, signal 18963/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15150, signal 19016/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15200, signal 19072/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15250, signal 19133/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15300, signal 19190/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15350, signal 19245/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15400, signal 19308/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15450, signal 19366/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15500, signal 19427/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15550, signal 19489/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15600, signal 19547/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15650, signal 19601/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15700, signal 19655/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15750, signal 19708/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15800, signal 19768/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15850, signal 19826/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15900, signal 19879/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 15950, signal 19934/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16000, signal 20002/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16050, signal 20055/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16100, signal 20109/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16150, signal 20170/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16200, signal 20225/66046 (executing program) 1970/01/01 00:02:14 fetching corpus: 16250, signal 20281/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16300, signal 20333/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16350, signal 20389/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16400, signal 20446/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16450, signal 20504/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16500, signal 20560/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16550, signal 20617/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16600, signal 20674/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16650, signal 20731/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16700, signal 20787/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16750, signal 20840/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16800, signal 20900/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16850, signal 20951/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16900, signal 21007/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 16950, signal 21060/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 17000, signal 21117/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 17050, signal 21174/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 17100, signal 21228/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 17150, signal 21284/66046 (executing program) 1970/01/01 00:02:15 fetching corpus: 17200, signal 21340/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17250, signal 21397/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17300, signal 21457/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17350, signal 21512/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17400, signal 21566/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17450, signal 21626/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17500, signal 21694/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17550, signal 21751/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17600, signal 21807/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17650, signal 21865/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17700, signal 21921/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17750, signal 21978/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17800, signal 22036/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17850, signal 22099/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17900, signal 22155/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 17950, signal 22207/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18000, signal 22260/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18050, signal 22313/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18100, signal 22364/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18150, signal 22417/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18200, signal 22469/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18250, signal 22526/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18300, signal 22585/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18350, signal 22642/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18400, signal 22698/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18450, signal 22756/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18500, signal 22810/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18550, signal 22868/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18600, signal 22925/66046 (executing program) 1970/01/01 00:02:16 fetching corpus: 18650, signal 22987/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18700, signal 23044/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18750, signal 23097/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18800, signal 23154/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18850, signal 23213/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18900, signal 23276/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 18950, signal 23337/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 19000, signal 23394/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 19050, signal 23451/66046 (executing program) 1970/01/01 00:02:17 fetching corpus: 19100, signal 23509/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19150, signal 23565/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19200, signal 23620/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19250, signal 23677/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19300, signal 23730/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19350, signal 23783/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19400, signal 23840/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19450, signal 23894/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19500, signal 23956/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19550, signal 24007/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19600, signal 24068/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19650, signal 24123/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19700, signal 24182/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19750, signal 24243/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19800, signal 24298/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19850, signal 24353/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19900, signal 24408/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 19950, signal 24461/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20000, signal 24516/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20050, signal 24569/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20100, signal 24624/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20150, signal 24678/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20200, signal 24735/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20250, signal 24796/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20300, signal 24851/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20350, signal 24905/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20400, signal 24960/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20450, signal 25014/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20500, signal 25069/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20550, signal 25125/66046 (executing program) 1970/01/01 00:02:18 fetching corpus: 20600, signal 25184/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20650, signal 25235/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20700, signal 25289/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20750, signal 25344/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20800, signal 25398/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20850, signal 25456/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20900, signal 25513/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 20950, signal 25569/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21000, signal 25627/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21050, signal 25679/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21100, signal 25739/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21150, signal 25794/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21200, signal 25852/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21250, signal 25904/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21300, signal 25965/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21350, signal 26020/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21400, signal 26076/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21450, signal 26130/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21500, signal 26188/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21550, signal 26244/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21600, signal 26312/66046 (executing program) 1970/01/01 00:02:19 fetching corpus: 21650, signal 26374/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21700, signal 26429/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21750, signal 26483/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21800, signal 26541/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21850, signal 26599/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21900, signal 26655/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 21950, signal 26710/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22000, signal 26767/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22050, signal 26823/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22100, signal 26878/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22150, signal 26930/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22200, signal 26985/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22250, signal 27037/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22300, signal 27094/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22350, signal 27153/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22400, signal 27211/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22450, signal 27271/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22500, signal 27322/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22550, signal 27382/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22600, signal 27440/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22650, signal 27498/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22700, signal 27552/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22750, signal 27612/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22800, signal 27666/66046 (executing program) 1970/01/01 00:02:20 fetching corpus: 22850, signal 27724/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 22900, signal 27784/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 22950, signal 27843/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23000, signal 27900/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23050, signal 27953/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23100, signal 28010/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23150, signal 28065/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23200, signal 28122/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23250, signal 28178/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23300, signal 28233/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23350, signal 28289/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23400, signal 28344/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23450, signal 28396/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23500, signal 28454/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23550, signal 28509/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23600, signal 28562/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23650, signal 28621/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23700, signal 28678/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23750, signal 28736/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23800, signal 28798/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23850, signal 28854/66046 (executing program) 1970/01/01 00:02:21 fetching corpus: 23900, signal 28913/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 23950, signal 28968/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24000, signal 29022/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24050, signal 29083/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24100, signal 29133/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24150, signal 29190/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24200, signal 29245/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24250, signal 29297/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24300, signal 29360/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24350, signal 29414/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24400, signal 29474/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24450, signal 29527/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24500, signal 29582/66046 (executing program) 1970/01/01 00:02:22 fetching corpus: 24550, signal 29637/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24600, signal 29690/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24650, signal 29743/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24700, signal 29800/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24750, signal 29852/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24800, signal 29907/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24850, signal 29959/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24900, signal 30010/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 24950, signal 30065/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25000, signal 30117/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25050, signal 30173/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25100, signal 30226/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25150, signal 30278/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25200, signal 30335/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25250, signal 30397/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25300, signal 30452/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25350, signal 30506/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25400, signal 30559/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25450, signal 30620/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25500, signal 30672/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25550, signal 30732/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25600, signal 30787/66046 (executing program) 1970/01/01 00:02:23 fetching corpus: 25650, signal 30840/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25700, signal 30893/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25750, signal 30950/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25800, signal 31003/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25850, signal 31061/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25900, signal 31114/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 25950, signal 31169/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26000, signal 31226/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26050, signal 31280/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26100, signal 31331/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26150, signal 31387/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26200, signal 31441/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26250, signal 31495/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26300, signal 31549/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26350, signal 31602/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26400, signal 31656/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26450, signal 31710/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26500, signal 31768/66046 (executing program) 1970/01/01 00:02:24 fetching corpus: 26550, signal 31817/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26600, signal 31869/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26650, signal 31921/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26700, signal 31973/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26750, signal 32029/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26800, signal 32084/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26850, signal 32138/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26900, signal 32190/66047 (executing program) 1970/01/01 00:02:24 fetching corpus: 26950, signal 32247/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27000, signal 32303/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27050, signal 32358/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27100, signal 32411/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27150, signal 32465/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27200, signal 32518/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27250, signal 32572/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27300, signal 32622/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27350, signal 32682/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27400, signal 32736/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27450, signal 32788/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27500, signal 32842/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27550, signal 32892/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27600, signal 32954/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27650, signal 33010/66047 (executing program) 1970/01/01 00:02:25 fetching corpus: 27700, signal 33063/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 27750, signal 33117/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 27800, signal 33170/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 27850, signal 33228/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 27900, signal 33282/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 27950, signal 33336/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 28000, signal 33392/66049 (executing program) 1970/01/01 00:02:25 fetching corpus: 28050, signal 33451/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28100, signal 33508/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28150, signal 33565/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28200, signal 33629/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28250, signal 33683/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28300, signal 33737/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28350, signal 33791/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28400, signal 33847/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28450, signal 33902/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28500, signal 33956/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28550, signal 34014/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28600, signal 34070/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28650, signal 34125/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28700, signal 34178/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28750, signal 34232/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28800, signal 34290/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28850, signal 34344/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28900, signal 34396/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 28950, signal 34452/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29000, signal 34506/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29050, signal 34558/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29100, signal 34610/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29150, signal 34664/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29200, signal 34717/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29250, signal 34770/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29300, signal 34831/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29350, signal 34884/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29400, signal 34941/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29450, signal 34995/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29500, signal 35051/66049 (executing program) 1970/01/01 00:02:26 fetching corpus: 29550, signal 35107/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29600, signal 35162/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29650, signal 35215/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29700, signal 35275/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29750, signal 35327/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29800, signal 35380/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29850, signal 35433/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29900, signal 35487/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 29950, signal 35540/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30000, signal 35593/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30050, signal 35650/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30100, signal 35711/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30150, signal 35769/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30200, signal 35825/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30250, signal 35885/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30300, signal 35939/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30350, signal 35994/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30400, signal 36049/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30450, signal 36104/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30500, signal 36155/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30550, signal 36207/66049 (executing program) 1970/01/01 00:02:27 fetching corpus: 30600, signal 36260/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30650, signal 36314/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30700, signal 36369/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30750, signal 36426/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30800, signal 36484/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30850, signal 36535/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30900, signal 36585/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 30950, signal 36644/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31000, signal 36697/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31050, signal 36751/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31100, signal 36804/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31150, signal 36856/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31200, signal 36912/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31250, signal 36966/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31300, signal 37017/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31350, signal 37071/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31400, signal 37123/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31450, signal 37179/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31500, signal 37230/66049 (executing program) 1970/01/01 00:02:28 fetching corpus: 31550, signal 37284/66049 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:29 fetching corpus: 31600, signal 37339/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31650, signal 37396/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31700, signal 37449/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31750, signal 37502/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31800, signal 37555/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31850, signal 37608/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31900, signal 37664/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 31950, signal 37723/66049 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:29 fetching corpus: 32000, signal 37777/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 32050, signal 37831/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 32100, signal 37888/66049 (executing program) 1970/01/01 00:02:29 fetching corpus: 32150, signal 37941/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32200, signal 37996/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32250, signal 38047/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32300, signal 38107/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32350, signal 38159/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32400, signal 38217/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32450, signal 38275/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32500, signal 38330/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32550, signal 38385/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32600, signal 38441/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32650, signal 38497/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32700, signal 38556/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32750, signal 38607/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32800, signal 38661/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32850, signal 38714/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32900, signal 38773/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 32950, signal 38826/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33000, signal 38883/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33050, signal 38938/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33100, signal 38997/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33150, signal 39051/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33200, signal 39105/66049 (executing program) 1970/01/01 00:02:30 fetching corpus: 33250, signal 39155/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33300, signal 39206/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33350, signal 39261/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33400, signal 39313/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33450, signal 39369/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33500, signal 39421/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33550, signal 39479/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33600, signal 39533/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33650, signal 39584/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33700, signal 39641/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33750, signal 39697/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33800, signal 39754/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33850, signal 39803/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33900, signal 39857/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 33950, signal 39912/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34000, signal 39965/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34050, signal 40018/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34100, signal 40071/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34150, signal 40125/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34200, signal 40177/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34250, signal 40228/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34300, signal 40280/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34350, signal 40332/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34400, signal 40388/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34450, signal 40445/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34500, signal 40500/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34550, signal 40553/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34600, signal 40606/66049 (executing program) 1970/01/01 00:02:31 fetching corpus: 34650, signal 40658/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34700, signal 40720/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34750, signal 40779/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34800, signal 40837/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34850, signal 40890/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34900, signal 40944/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 34950, signal 40997/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35000, signal 41048/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35050, signal 41107/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35100, signal 41160/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35150, signal 41219/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35200, signal 41276/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35250, signal 41332/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35300, signal 41385/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35350, signal 41438/66049 (executing program) 1970/01/01 00:02:32 fetching corpus: 35400, signal 41495/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35450, signal 41548/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35500, signal 41603/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35550, signal 41657/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35600, signal 41708/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35650, signal 41765/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35700, signal 41822/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35750, signal 41876/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35800, signal 41928/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35850, signal 41981/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35900, signal 42032/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 35950, signal 42092/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36000, signal 42147/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36050, signal 42201/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36100, signal 42256/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36150, signal 42309/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36200, signal 42361/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36250, signal 42413/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36300, signal 42467/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36350, signal 42519/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36400, signal 42575/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36450, signal 42635/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36500, signal 42690/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36550, signal 42748/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36600, signal 42807/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36650, signal 42865/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36700, signal 42919/66049 (executing program) 1970/01/01 00:02:33 fetching corpus: 36750, signal 42975/66049 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:34 fetching corpus: 36800, signal 43026/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 36850, signal 43083/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 36900, signal 43136/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 36950, signal 43193/66049 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:34 fetching corpus: 37000, signal 43250/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37050, signal 43301/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37100, signal 43358/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37150, signal 43410/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37200, signal 43461/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37250, signal 43514/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37300, signal 43566/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37350, signal 43624/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37400, signal 43674/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37450, signal 43725/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37500, signal 43780/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37550, signal 43835/66049 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:34 fetching corpus: 37600, signal 43890/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37650, signal 43948/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37700, signal 44002/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37750, signal 44056/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37800, signal 44111/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37850, signal 44163/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37900, signal 44212/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 37950, signal 44261/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 38000, signal 44316/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 38050, signal 44369/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 38100, signal 44423/66049 (executing program) 1970/01/01 00:02:34 fetching corpus: 38150, signal 44476/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38200, signal 44530/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38250, signal 44583/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38300, signal 44635/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38350, signal 44686/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38400, signal 44737/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38450, signal 44793/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38500, signal 44847/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38550, signal 44899/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38600, signal 44953/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38650, signal 45009/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38700, signal 45064/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38750, signal 45115/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38800, signal 45165/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38850, signal 45216/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38900, signal 45268/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 38950, signal 45321/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39000, signal 45374/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39050, signal 45425/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39100, signal 45476/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39150, signal 45531/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39200, signal 45583/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39250, signal 45635/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39300, signal 45691/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39350, signal 45751/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39400, signal 45806/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39450, signal 45863/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39500, signal 45918/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39550, signal 45972/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39600, signal 46029/66049 (executing program) 1970/01/01 00:02:35 fetching corpus: 39650, signal 46084/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39700, signal 46137/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39750, signal 46191/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39800, signal 46241/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39850, signal 46294/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39900, signal 46351/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 39950, signal 46404/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40000, signal 46456/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40050, signal 46508/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40100, signal 46558/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40150, signal 46609/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40200, signal 46663/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40250, signal 46716/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40300, signal 46771/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40350, signal 46824/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40400, signal 46877/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40450, signal 46929/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40500, signal 46983/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40550, signal 47039/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40600, signal 47090/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40650, signal 47146/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40700, signal 47197/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40750, signal 47250/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40800, signal 47303/66049 (executing program) 1970/01/01 00:02:36 fetching corpus: 40850, signal 47360/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 40900, signal 47413/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 40950, signal 47470/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41000, signal 47521/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41050, signal 47571/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41100, signal 47625/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41150, signal 47677/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41200, signal 47732/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41250, signal 47783/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41300, signal 47837/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41350, signal 47893/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41400, signal 47945/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41450, signal 48000/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41500, signal 48052/66049 (executing program) 1970/01/01 00:02:37 fetching corpus: 41550, signal 48103/66049 (executing program) 1970/01/01 00:02:38 fetching corpus: 41600, signal 48159/66049 (executing program) 1970/01/01 00:02:38 fetching corpus: 41650, signal 48211/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41700, signal 48267/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41750, signal 48321/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41800, signal 48374/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41850, signal 48425/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41900, signal 48476/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 41950, signal 48532/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42000, signal 48588/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42050, signal 48647/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42100, signal 48700/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42150, signal 48753/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42200, signal 48805/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42250, signal 48857/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42300, signal 48910/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42350, signal 48965/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42400, signal 49028/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42450, signal 49087/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42500, signal 49145/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42550, signal 49202/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42600, signal 49256/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42650, signal 49305/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42700, signal 49360/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42750, signal 49412/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42800, signal 49467/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42850, signal 49522/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42900, signal 49574/66050 (executing program) 1970/01/01 00:02:38 fetching corpus: 42950, signal 49627/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43000, signal 49679/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43050, signal 49738/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43100, signal 49793/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43150, signal 49846/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43200, signal 49896/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43250, signal 49950/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43300, signal 50003/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43350, signal 50056/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43400, signal 50107/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43450, signal 50160/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43500, signal 50210/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43550, signal 50262/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43600, signal 50312/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43650, signal 50365/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43700, signal 50419/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43750, signal 50474/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43800, signal 50527/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43850, signal 50579/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43900, signal 50633/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 43950, signal 50691/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44000, signal 50746/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44050, signal 50800/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44100, signal 50855/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44150, signal 50907/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44200, signal 50959/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44250, signal 51011/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44300, signal 51065/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44350, signal 51116/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44400, signal 51174/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44450, signal 51224/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44500, signal 51274/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44550, signal 51323/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44600, signal 51377/66050 (executing program) 1970/01/01 00:02:39 fetching corpus: 44650, signal 51430/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44700, signal 51480/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44750, signal 51530/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44800, signal 51583/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44850, signal 51633/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44900, signal 51691/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 44950, signal 51742/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45000, signal 51793/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45050, signal 51845/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45100, signal 51899/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45150, signal 51954/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45200, signal 52007/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45250, signal 52058/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45300, signal 52112/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45350, signal 52164/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45400, signal 52215/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45450, signal 52273/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45500, signal 52328/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45550, signal 52380/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45600, signal 52438/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45650, signal 52498/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45700, signal 52549/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45750, signal 52600/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45800, signal 52656/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45850, signal 52708/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45900, signal 52761/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 45950, signal 52811/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46000, signal 52862/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46050, signal 52913/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46100, signal 52967/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46150, signal 53020/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46200, signal 53071/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46250, signal 53123/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46300, signal 53175/66050 (executing program) 1970/01/01 00:02:40 fetching corpus: 46350, signal 53228/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46400, signal 53277/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46450, signal 53328/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46500, signal 53380/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46550, signal 53429/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46600, signal 53480/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46650, signal 53535/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46700, signal 53592/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46750, signal 53643/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46800, signal 53694/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46850, signal 53747/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46900, signal 53800/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 46950, signal 53856/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47000, signal 53910/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47050, signal 53965/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47100, signal 54018/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47150, signal 54075/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47200, signal 54127/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47250, signal 54178/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47300, signal 54233/66050 (executing program) 1970/01/01 00:02:41 fetching corpus: 47350, signal 54283/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47400, signal 54341/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47450, signal 54395/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47500, signal 54447/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47550, signal 54501/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47600, signal 54553/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47650, signal 54607/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47700, signal 54658/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47750, signal 54709/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47800, signal 54763/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47850, signal 54813/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47900, signal 54864/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 47950, signal 54917/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48000, signal 54971/66050 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:02:42 fetching corpus: 48050, signal 55024/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48100, signal 55079/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48150, signal 55132/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48200, signal 55184/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48250, signal 55235/66050 (executing program) 1970/01/01 00:02:42 fetching corpus: 48300, signal 55287/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48350, signal 55337/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48400, signal 55393/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48450, signal 55444/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48500, signal 55498/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48550, signal 55551/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48600, signal 55603/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48650, signal 55653/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48700, signal 55706/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48750, signal 55758/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48800, signal 55811/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48850, signal 55864/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48900, signal 55918/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 48950, signal 55969/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 49000, signal 56022/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 49050, signal 56074/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 49100, signal 56130/66050 (executing program) 1970/01/01 00:02:44 fetching corpus: 49150, signal 56183/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49200, signal 56248/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49250, signal 56301/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49300, signal 56353/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49350, signal 56409/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49400, signal 56459/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49450, signal 56511/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49500, signal 56562/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49550, signal 56615/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49600, signal 56667/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49650, signal 56718/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49700, signal 56772/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49750, signal 56824/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49800, signal 56878/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49850, signal 56931/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49900, signal 56985/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 49950, signal 57037/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50000, signal 57087/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50050, signal 57141/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50100, signal 57194/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50150, signal 57246/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50200, signal 57297/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50250, signal 57350/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50300, signal 57400/66050 (executing program) 1970/01/01 00:02:45 fetching corpus: 50350, signal 57456/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50400, signal 57509/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50450, signal 57563/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50500, signal 57616/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50550, signal 57668/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50600, signal 57721/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50650, signal 57772/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50700, signal 57823/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50750, signal 57876/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50800, signal 57928/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50850, signal 57981/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50900, signal 58033/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 50950, signal 58084/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51000, signal 58137/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51050, signal 58191/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51100, signal 58245/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51150, signal 58295/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51200, signal 58347/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51250, signal 58399/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51300, signal 58451/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51350, signal 58505/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51400, signal 58557/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51450, signal 58612/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51500, signal 58664/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51550, signal 58719/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51600, signal 58772/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51650, signal 58823/66050 (executing program) 1970/01/01 00:02:46 fetching corpus: 51700, signal 58873/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 51750, signal 58927/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 51800, signal 58982/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 51850, signal 59034/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 51900, signal 59089/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 51950, signal 59145/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52000, signal 59202/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52050, signal 59256/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52100, signal 59309/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52150, signal 59366/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52200, signal 59421/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52250, signal 59474/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52300, signal 59527/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52350, signal 59587/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52400, signal 59639/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52450, signal 59694/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52500, signal 59748/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52550, signal 59801/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52600, signal 59853/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52650, signal 59907/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52700, signal 59959/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52750, signal 60014/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52800, signal 60067/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52850, signal 60118/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52900, signal 60168/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 52950, signal 60217/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 53000, signal 60269/66050 (executing program) 1970/01/01 00:02:47 fetching corpus: 53050, signal 60321/66050 (executing program) 1970/01/01 00:02:48 fetching corpus: 53100, signal 60372/66050 (executing program) 1970/01/01 00:02:48 fetching corpus: 53150, signal 60426/66050 (executing program) 1970/01/01 00:02:48 fetching corpus: 53200, signal 60476/66050 (executing program) 1970/01/01 00:02:48 fetching corpus: 53250, signal 60530/66050 (executing program) 1970/01/01 00:02:48 fetching corpus: 53300, signal 60583/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53350, signal 60636/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53400, signal 60693/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53450, signal 60743/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53500, signal 60800/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53550, signal 60862/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53600, signal 60914/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53650, signal 60966/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53700, signal 61022/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53750, signal 61079/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53800, signal 61132/66050 (executing program) 1970/01/01 00:02:49 fetching corpus: 53850, signal 61184/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 53900, signal 61243/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 53950, signal 61296/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54000, signal 61349/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54050, signal 61405/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54100, signal 61461/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54150, signal 61512/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54200, signal 61564/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54250, signal 61618/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54300, signal 61672/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54350, signal 61728/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54400, signal 61778/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54450, signal 61829/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54500, signal 61880/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54550, signal 61933/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54600, signal 61984/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54650, signal 62035/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54700, signal 62089/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54750, signal 62140/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54800, signal 62190/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54850, signal 62241/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54900, signal 62309/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 54950, signal 62363/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 55000, signal 62415/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 55050, signal 62467/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 55100, signal 62520/66050 (executing program) 1970/01/01 00:02:50 fetching corpus: 55150, signal 62573/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55200, signal 62625/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55250, signal 62679/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55300, signal 62730/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55350, signal 62782/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55400, signal 62835/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55450, signal 62889/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55500, signal 62945/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55550, signal 62996/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55600, signal 63049/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55650, signal 63103/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55700, signal 63153/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55750, signal 63207/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55800, signal 63258/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55850, signal 63312/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55900, signal 63363/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 55950, signal 63416/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 56000, signal 63468/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 56050, signal 63520/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 56100, signal 63571/66050 (executing program) 1970/01/01 00:02:51 fetching corpus: 56150, signal 63625/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56200, signal 63682/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56250, signal 63733/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56300, signal 63789/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56350, signal 63843/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56400, signal 63899/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56450, signal 63949/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56500, signal 64001/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56550, signal 64052/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56600, signal 64105/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56650, signal 64155/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56700, signal 64207/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56750, signal 64261/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56800, signal 64314/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56850, signal 64367/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56900, signal 64418/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 56950, signal 64469/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57000, signal 64522/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57050, signal 64576/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57100, signal 64627/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57150, signal 64677/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57200, signal 64732/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57250, signal 64787/66050 (executing program) 1970/01/01 00:02:52 fetching corpus: 57300, signal 64842/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57350, signal 64897/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57400, signal 64946/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57450, signal 64997/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57500, signal 65049/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57550, signal 65100/66051 (executing program) 1970/01/01 00:02:52 fetching corpus: 57600, signal 65152/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57650, signal 65205/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57700, signal 65260/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57750, signal 65313/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57800, signal 65367/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57850, signal 65418/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57900, signal 65467/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57913, signal 65480/66051 (executing program) 1970/01/01 00:02:53 fetching corpus: 57913, signal 65480/66051 (executing program) 1970/01/01 00:03:12 starting 2 fuzzer processes 00:03:14 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8001, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000040)) flock(r0, 0xa) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x80}, &(0x7f0000000140)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000180)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000001c0)={0x6, 'gre0\x00', {0xfffffffc}, 0xfffe}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000400)={r4, 0x1000}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001400)={r2, 0x8, 0x6, 0xfffff801, 0xff, 0x9}, &(0x7f0000001440)=0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001480)={0x16, 0x15, [], [@generic={0x1, 0x53, "4d69e892576fe3b4f3ac3ddd60ad8e456493f1c459874b915f3d4fab3a172b2a6d41b3b04426474f7906525b571bbe6d0808f1b76873f50e0b7418f3f8aac63c8e4dfc4e8ecc08e4b1f4eed526750b938aa0c7"}, @pad1, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @ipv4={[], [], @loopback}}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x36}}, @hao={0xc9, 0x10, @ipv4={[], [], @remote}}]}, 0xb8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000017c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f00000015c0)={0x18c, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0xd65}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffd22}, {0x6, 0x16, 0xfff9}, {0x5, 0x12, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000090) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001a40)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001a80)={r1, 0x3}, &(0x7f0000001ac0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000001b00)={r7, 0xfff}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001b40)={r1, 0x9, 0x4, [0x2, 0x2, 0x2, 0x81]}, &(0x7f0000001b80)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001bc0)={r8, 0x5, 0x8}, &(0x7f0000001c00)=0x8) write$dsp(r0, &(0x7f0000001c40)="2315396c03d5cd737ff825a44b4cf1268ba8e401a9b0872c8bab896eede58d7dbd0a5d36d5b9103045fbab744ac7035dfedca52b383a06821b69561ff755420cfb692e644cbda44e218fbf75fe74446cb7cdedf9c5055c5850cd137d13bbc9e7b5b76a76b02adaafc981ae7651f8f5a711de9112ff97cfac082c47675a856342f094ea30b8e77400b395bab6ec8bd644bee925ea31621a05efba7e9df293bc62bb71682811cac36ac97bbf7bb0e83f23727f7cd4e094327251aca896f6cc457f08d528e73ba5ff32ebd4b3554ea97703bdbe9591fb5950c936b0c40669cf123afb9176859bb4903717e4", 0xea) 00:03:15 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) ftruncate(r6, 0x2) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000880)="d5960b2d2326d6a39d44addee92e4944077bbf39f0ba5e4b5b53737e48ba386fc028ebcf0d44bd1b1d1829fcd7d477ad") [ 196.802244][ T4597] IPVS: ftp: loaded support on port[0] = 21 [ 198.118977][ T4597] chnl_net:caif_netlink_parms(): no params data found [ 198.243231][ T4599] IPVS: ftp: loaded support on port[0] = 21 [ 198.696736][ T3922] Bluetooth: hci0: command 0x0409 tx timeout [ 199.011336][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.013078][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.029479][ T4597] device bridge_slave_0 entered promiscuous mode [ 199.088199][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.089284][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.105551][ T4597] device bridge_slave_1 entered promiscuous mode [ 199.430978][ T4597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.466986][ T4597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.639905][ T4597] team0: Port device team_slave_0 added [ 199.672728][ T4597] team0: Port device team_slave_1 added [ 199.734638][ T4302] Bluetooth: hci1: command 0x0409 tx timeout [ 200.011485][ T4597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.012126][ T4597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.016197][ T4597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.087285][ T4597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.088323][ T4597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.090767][ T4597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.775060][ T3922] Bluetooth: hci0: command 0x041b tx timeout [ 200.986361][ T4597] device hsr_slave_0 entered promiscuous mode [ 200.997811][ T4597] device hsr_slave_1 entered promiscuous mode [ 201.010460][ T4599] chnl_net:caif_netlink_parms(): no params data found [ 201.814613][ T3922] Bluetooth: hci1: command 0x041b tx timeout [ 201.968177][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.969503][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.986166][ T4599] device bridge_slave_0 entered promiscuous mode [ 202.046325][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.047693][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.062316][ T4599] device bridge_slave_1 entered promiscuous mode [ 202.431986][ T4599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.520124][ T4599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.842801][ T4599] team0: Port device team_slave_0 added [ 202.855174][ T3922] Bluetooth: hci0: command 0x040f tx timeout [ 202.889955][ T4599] team0: Port device team_slave_1 added [ 203.129579][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.130202][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.131584][ T4599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.150189][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.150827][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.152217][ T4599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.578642][ T4599] device hsr_slave_0 entered promiscuous mode [ 203.588031][ T4599] device hsr_slave_1 entered promiscuous mode [ 203.595097][ T4599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.595852][ T4599] Cannot create hsr debugfs directory [ 203.703473][ T4597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.794982][ T4597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.894979][ T3922] Bluetooth: hci1: command 0x040f tx timeout [ 203.933221][ T4597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.012662][ T4597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.934737][ T3922] Bluetooth: hci0: command 0x0419 tx timeout [ 205.171346][ T4599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.251207][ T4599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.325051][ T4599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.378621][ T4599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.925786][ T4597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.974427][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 206.107850][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.119486][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.223378][ T4597] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.319922][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.330293][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.339161][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.340213][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.369286][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.493286][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.502212][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.511560][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.512539][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.618507][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.688551][ T4599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.780978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.874770][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.895325][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.902073][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.915822][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.937302][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.998354][ T4599] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.040492][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.056775][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.109789][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.117035][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.122000][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.122946][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.187263][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.195721][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.201929][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.252697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.260836][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.272117][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.273119][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.331145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.354332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.440702][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.453291][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.569533][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.661977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.683096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.710712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.809548][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.828613][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.931005][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.945285][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.995870][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.997602][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.051722][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.061716][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.180370][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.261631][ T4597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.567034][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.568954][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.677390][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.702745][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.781545][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.076665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.095550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.142063][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.150895][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.166324][ T4597] device veth0_vlan entered promiscuous mode [ 209.338541][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.349730][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.371209][ T4597] device veth1_vlan entered promiscuous mode [ 209.568954][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.586687][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.667809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.680887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.718680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.729026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.799153][ T4599] device veth0_vlan entered promiscuous mode [ 209.957251][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.972374][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.022754][ T4597] device veth0_macvtap entered promiscuous mode [ 210.050642][ T4599] device veth1_vlan entered promiscuous mode [ 210.133054][ T4597] device veth1_macvtap entered promiscuous mode [ 210.386598][ T4597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.390870][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.403077][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.427341][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.437369][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.445329][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.451999][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.495912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.514696][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.563176][ T4599] device veth0_macvtap entered promiscuous mode [ 210.588937][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.622445][ T4597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.635063][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.642285][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.720416][ T4599] device veth1_macvtap entered promiscuous mode [ 210.758935][ T4597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.759934][ T4597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.760644][ T4597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.761336][ T4597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.118799][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.119947][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.135270][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.140755][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.159988][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.319586][ T4599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.320429][ T4599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.342570][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.346631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.357927][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.571821][ T4599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.572701][ T4599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.580792][ T4599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.581594][ T4599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.636772][ T464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.637580][ T464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.642997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.025486][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.026397][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.028270][ T5025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.512272][ T4597] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 212.635800][ T464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.636511][ T464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.638817][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.909383][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.910102][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.912081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:03:33 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:33 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) ftruncate(r6, 0x2) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000880)="d5960b2d2326d6a39d44addee92e4944077bbf39f0ba5e4b5b53737e48ba386fc028ebcf0d44bd1b1d1829fcd7d477ad") ps_root_recvmsgcb: failed to send message to pid 4590: Connection refused 00:03:33 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) ps_root_recvmsgcb: failed to send message to pid 4591: Connection refused 00:03:34 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) ftruncate(r6, 0x2) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000880)="d5960b2d2326d6a39d44addee92e4944077bbf39f0ba5e4b5b53737e48ba386fc028ebcf0d44bd1b1d1829fcd7d477ad") 00:03:34 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:34 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) ftruncate(r6, 0x2) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000880)="d5960b2d2326d6a39d44addee92e4944077bbf39f0ba5e4b5b53737e48ba386fc028ebcf0d44bd1b1d1829fcd7d477ad") 00:03:34 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:35 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40) ftruncate(r6, 0x2) 00:03:35 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:35 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a31}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) ftruncate(r6, 0x2) 00:03:36 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:36 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffff801}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x29}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x11) ftruncate(r6, 0x2) 00:03:36 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:37 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:37 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ftruncate(r6, 0x2) 00:03:37 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:37 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0xfc73, @private1={0xfc, 0x1, [], 0x1}, 0x1}], 0x1c) ftruncate(r5, 0x2) 00:03:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:38 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r5, 0x2) ps_root_recvmsgcb: failed to send message to pid 4594: Connection refused ps_root_recvmsgcb: failed to send message to pid 4592: Connection refused 00:03:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:38 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) ftruncate(0xffffffffffffffff, 0x2) ps_root_recvmsgcb: failed to send message to pid 4593: Connection refused 00:03:39 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:39 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) ftruncate(0xffffffffffffffff, 0x2) 00:03:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:39 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000400)={0x1, 0x4, [0x81, 0x80, 0x4, 0xebe8, 0x7ff], 0x9}) ftruncate(0xffffffffffffffff, 0x2) 00:03:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:40 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r5, 0x2) 00:03:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:41 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r3, 0x2) 00:03:41 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:41 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x200000, 0xb8) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r3, 0x2) 00:03:41 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:42 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x600140, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r3, 0x2) 00:03:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:42 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/147, &(0x7f00000001c0)=0x93) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r3, 0x2) 00:03:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:43 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) dup3(r1, r2, 0x80000) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r3, 0x2) 00:03:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:44 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3d7d, 0x8602) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r2, 0x2) 00:03:44 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:44 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x7}, 0x8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r2, 0x2) 00:03:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:45 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r1, 0x2) 00:03:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:45 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r1, 0x2) 00:03:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:46 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x2) 00:03:46 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:46 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x2) ps_root_recvmsgcb: failed to send message to pid 4595: Connection refused 00:03:47 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:47 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0) ftruncate(r0, 0x2) 00:03:47 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x8000) 00:03:47 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0) ftruncate(r0, 0x2) 00:03:47 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x8000) 00:03:47 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xc0c82, 0x0) ftruncate(r0, 0x2) 00:03:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x8000) 00:03:48 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ftruncate(r0, 0x2) 00:03:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x588, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x5, 0x16}, {0x1}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58, 0x0, 0x16e, 0x8000, 0x919, 0x200, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x5, 0x16, 0x4, 0x16, 0x6c, 0x4]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xe7c178f8bbd1bf87, 0x5, 0x18, 0xb, 0x74, 0x18, 0x12, 0x2, 0x5, 0x12, 0x6, 0x12, 0xc, 0x2, 0x60, 0x30, 0x4, 0x60, 0x36, 0x1, 0x9, 0x12, 0x4, 0x2, 0x12, 0x1, 0xc, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x5, 0xf801, 0x1, 0x1000, 0x3, 0x31]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x314, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x9, 0x0, 0x3, 0x18, 0x3, 0x48, 0x18, 0xc, 0x213dd22063745c0c, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x5, 0x36, 0x9, 0x12, 0x16, 0x3, 0x0, 0x48, 0x4, 0x18, 0x6c, 0x48, 0x6c, 0x5, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1b, 0x0, 0x60, 0x48, 0x5, 0x6c, 0x3, 0x30, 0x1, 0x6, 0x4, 0x4, 0x60, 0x12, 0x60, 0x12, 0xc, 0x12, 0x18, 0x12, 0x48, 0x10, 0x2, 0x2, 0xb, 0x1b, 0x6, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x0, 0x0, 0x8, 0x1f, 0x80, 0x1, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x1, 0x3, 0x18, 0x16, 0x6c, 0x36, 0x6c, 0x1b, 0x1b, 0x12, 0xc, 0x36, 0x2, 0xb, 0x1b, 0x60, 0x9, 0x7c, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0xc, 0x9, 0x3, 0x1b, 0x9, 0x9, 0x24, 0x3, 0x9, 0x3f, 0x30, 0xc, 0x4, 0x14, 0xc, 0x36, 0x24, 0xb, 0x23, 0x6, 0x1b, 0x18, 0x18, 0x3]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7bf, 0xfff9, 0x1ff, 0x5, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x18, 0x6c, 0x1b, 0x2, 0x6c, 0x1, 0x414f9cfc28fc5993, 0x6, 0x30, 0x2, 0x5, 0x6, 0x2, 0x60, 0x2, 0x0, 0x18, 0x36, 0x12, 0x4, 0x18, 0x36, 0x16, 0x5, 0x2, 0x9, 0x16, 0x6c, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x30, 0x5, 0x6c, 0x12, 0x24, 0x2, 0x48, 0x18, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x4, 0x5, 0x3b8, 0x6, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x252e}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x588}}, 0x8000) 00:03:48 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ftruncate(r0, 0x2) 00:03:49 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ftruncate(r0, 0x2) 00:03:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 00:03:49 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(0xffffffffffffffff, 0x2) 00:03:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 00:03:50 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(0xffffffffffffffff, 0x2) 00:03:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) 00:03:50 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(0xffffffffffffffff, 0x2) 00:03:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 00:03:50 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x0) 00:03:51 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:03:51 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x0) 00:03:51 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 232.660766][ T5209] FAULT_INJECTION: forcing a failure. [ 232.660766][ T5209] name failslab, interval 1, probability 0, space 0, times 1 [ 232.662781][ T5209] CPU: 0 PID: 5209 Comm: syz-executor.1 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 232.663765][ T5209] Hardware name: linux,dummy-virt (DT) [ 232.664386][ T5209] Call trace: [ 232.664709][ T5209] dump_backtrace+0x0/0x1b0 [ 232.665741][ T5209] show_stack+0x18/0x70 [ 232.666209][ T5209] dump_stack+0xd0/0x12c [ 232.666708][ T5209] should_fail+0x16c/0x220 [ 232.667207][ T5209] __should_failslab+0x5c/0x80 [ 232.667640][ T5209] should_failslab+0x10/0x2c [ 232.668054][ T5209] __kmalloc+0x268/0x390 [ 232.668632][ T5209] tomoyo_realpath_from_path+0x48/0x1c0 [ 232.669106][ T5209] tomoyo_path_perm+0xe8/0x1d0 [ 232.669531][ T5209] tomoyo_path_truncate+0x1c/0x30 [ 232.670246][ T5209] security_path_truncate+0x40/0x60 [ 232.670855][ T5209] do_sys_ftruncate+0xc8/0x1b0 [ 232.671421][ T5209] __arm64_sys_ftruncate+0x24/0x30 [ 232.671939][ T5209] el0_svc_common.constprop.0+0x74/0x190 [ 232.672467][ T5209] do_el0_svc+0x74/0x90 [ 232.672984][ T5209] el0_svc+0x14/0x20 [ 232.673596][ T5209] el0_sync_handler+0x1a4/0x1b0 [ 232.674177][ T5209] el0_sync+0x190/0x1c0 [ 232.699490][ T5209] ERROR: Out of memory at tomoyo_realpath_from_path. 00:03:52 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x0) [ 232.872801][ T5211] FAULT_INJECTION: forcing a failure. [ 232.872801][ T5211] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.874882][ T5211] CPU: 0 PID: 5211 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 232.875641][ T5211] Hardware name: linux,dummy-virt (DT) [ 232.876084][ T5211] Call trace: [ 232.876395][ T5211] dump_backtrace+0x0/0x1b0 [ 232.876838][ T5211] show_stack+0x18/0x70 [ 232.877247][ T5211] dump_stack+0xd0/0x12c [ 232.877648][ T5211] should_fail+0x16c/0x220 [ 232.878175][ T5211] should_fail_usercopy+0x1c/0x30 [ 232.878643][ T5211] __copy_msghdr_from_user+0x40/0x1ac [ 232.879134][ T5211] sendmsg_copy_msghdr+0x3c/0xb0 [ 232.879571][ T5211] ___sys_sendmsg+0x5c/0xc0 [ 232.879980][ T5211] __sys_sendmsg+0x68/0xc4 [ 232.880389][ T5211] __arm64_sys_sendmsg+0x28/0x3c [ 232.880823][ T5211] el0_svc_common.constprop.0+0x74/0x190 [ 232.881295][ T5211] do_el0_svc+0x74/0x90 [ 232.881708][ T5211] el0_svc+0x14/0x20 [ 232.882098][ T5211] el0_sync_handler+0x1a4/0x1b0 [ 232.882522][ T5211] el0_sync+0x190/0x1c0 00:03:52 executing program 0 (fault-call:3 fault-nth:1): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 233.220900][ T5213] FAULT_INJECTION: forcing a failure. [ 233.220900][ T5213] name failslab, interval 1, probability 0, space 0, times 0 [ 233.221972][ T5213] CPU: 1 PID: 5213 Comm: syz-executor.1 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 233.222772][ T5213] Hardware name: linux,dummy-virt (DT) [ 233.223237][ T5213] Call trace: [ 233.223701][ T5213] dump_backtrace+0x0/0x1b0 [ 233.224171][ T5213] show_stack+0x18/0x70 [ 233.224715][ T5213] dump_stack+0xd0/0x12c [ 233.225180][ T5213] should_fail+0x16c/0x220 [ 233.225595][ T5213] __should_failslab+0x5c/0x80 [ 233.226118][ T5213] should_failslab+0x10/0x2c [ 233.226641][ T5213] __kmalloc+0x268/0x390 [ 233.227046][ T5213] tomoyo_encode2.part.0+0x7c/0x140 [ 233.227503][ T5213] tomoyo_encode+0x2c/0x44 [ 233.228015][ T5213] tomoyo_realpath_from_path+0x84/0x1c0 [ 233.228572][ T5213] tomoyo_path_perm+0xe8/0x1d0 [ 233.228982][ T5213] tomoyo_path_truncate+0x1c/0x30 [ 233.229414][ T5213] security_path_truncate+0x40/0x60 [ 233.230004][ T5213] do_sys_ftruncate+0xc8/0x1b0 [ 233.230573][ T5213] __arm64_sys_ftruncate+0x24/0x30 [ 233.231040][ T5213] el0_svc_common.constprop.0+0x74/0x190 [ 233.231791][ T5213] do_el0_svc+0x74/0x90 [ 233.232269][ T5213] el0_svc+0x14/0x20 [ 233.232704][ T5213] el0_sync_handler+0x1a4/0x1b0 [ 233.233192][ T5213] el0_sync+0x190/0x1c0 [ 233.250908][ T5213] ERROR: Out of memory at tomoyo_realpath_from_path. 00:03:52 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0x0) [ 233.470123][ T5215] FAULT_INJECTION: forcing a failure. [ 233.470123][ T5215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.490970][ T5215] CPU: 1 PID: 5215 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 233.491814][ T5215] Hardware name: linux,dummy-virt (DT) [ 233.492263][ T5215] Call trace: [ 233.492583][ T5215] dump_backtrace+0x0/0x1b0 [ 233.493037][ T5215] show_stack+0x18/0x70 [ 233.493539][ T5215] dump_stack+0xd0/0x12c [ 233.494108][ T5215] should_fail+0x16c/0x220 [ 233.494593][ T5215] should_fail_usercopy+0x1c/0x30 [ 233.495061][ T5215] iovec_from_user+0x240/0x304 [ 233.495662][ T5215] __import_iovec+0x3c/0x160 [ 233.496179][ T5215] import_iovec+0x1c/0xac [ 233.496597][ T5215] sendmsg_copy_msghdr+0x8c/0xb0 [ 233.497150][ T5215] ___sys_sendmsg+0x5c/0xc0 [ 233.497601][ T5215] __sys_sendmsg+0x68/0xc4 [ 233.498064][ T5215] __arm64_sys_sendmsg+0x28/0x3c [ 233.498548][ T5215] el0_svc_common.constprop.0+0x74/0x190 [ 233.499224][ T5215] do_el0_svc+0x74/0x90 [ 233.499714][ T5215] el0_svc+0x14/0x20 [ 233.500135][ T5215] el0_sync_handler+0x1a4/0x1b0 [ 233.500684][ T5215] el0_sync+0x190/0x1c0 00:03:52 executing program 0 (fault-call:3 fault-nth:2): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 233.792259][ T5217] FAULT_INJECTION: forcing a failure. [ 233.792259][ T5217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.797090][ T5217] CPU: 1 PID: 5217 Comm: syz-executor.1 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 233.798387][ T5217] Hardware name: linux,dummy-virt (DT) [ 233.799286][ T5217] Call trace: [ 233.799858][ T5217] dump_backtrace+0x0/0x1b0 [ 233.800951][ T5217] show_stack+0x18/0x70 [ 233.801663][ T5217] dump_stack+0xd0/0x12c [ 233.802455][ T5217] should_fail+0x16c/0x220 [ 233.803426][ T5217] should_fail_usercopy+0x1c/0x30 [ 233.804389][ T5217] simple_read_from_buffer+0x68/0x150 [ 233.805244][ T5217] proc_fail_nth_read+0xc8/0x114 [ 233.806150][ T5217] vfs_read+0xac/0x1e0 [ 233.807098][ T5217] ksys_read+0x68/0xfc [ 233.807820][ T5217] __arm64_sys_read+0x20/0x30 [ 233.808498][ T5217] el0_svc_common.constprop.0+0x74/0x190 [ 233.809601][ T5217] do_el0_svc+0x74/0x90 [ 233.810358][ T5217] el0_svc+0x14/0x20 [ 233.811272][ T5217] el0_sync_handler+0x1a4/0x1b0 [ 233.812076][ T5217] el0_sync+0x190/0x1c0 00:03:53 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ftruncate(r0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0xffffffff}, 0x16, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ac2f980aceb8cde57cf163e8461a4a9664e903ee8f73cd50ab7ad4725b8ce93c6adede61dc690387270044af81bf80617f39863816e43576b154fbf56d6cba17c018e97f05e5b6a17649c987eb2bb016d9dbe31137e23207b76b14abbc374742d02e1604990d0c3c1a4c9f11048c71948ab785224e633faef215ebf218c2594ff7f2272de9dc5b85404d2ebfb1dbf882a00e2fa8fd02e11a310a72749fafc9d296d22cdd30295a248f0f08db9642f654af83259b6ae959fad9a7cc3d861224057c14e45f51cb19a0a2ba893b65cdd9fed3d6dec2c6d309c19aba2cca6b0fdde62137929a417984", 0xe7}], 0x1, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xc2}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0xa8}}], 0x1, 0x4000001) connect$x25(r1, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) [ 234.105437][ T5219] FAULT_INJECTION: forcing a failure. [ 234.105437][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 234.106401][ T5219] CPU: 1 PID: 5219 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 234.107102][ T5219] Hardware name: linux,dummy-virt (DT) [ 234.107524][ T5219] Call trace: [ 234.107820][ T5219] dump_backtrace+0x0/0x1b0 [ 234.108253][ T5219] show_stack+0x18/0x70 [ 234.108651][ T5219] dump_stack+0xd0/0x12c [ 234.109051][ T5219] should_fail+0x16c/0x220 [ 234.109455][ T5219] __should_failslab+0x5c/0x80 [ 234.109899][ T5219] should_failslab+0x10/0x2c [ 234.110332][ T5219] kmem_cache_alloc_node+0x6c/0x330 [ 234.110782][ T5219] __alloc_skb+0x5c/0x1a0 [ 234.111188][ T5219] netlink_sendmsg+0x2ac/0x3e4 [ 234.111607][ T5219] sock_sendmsg+0x54/0x60 [ 234.112009][ T5219] ____sys_sendmsg+0x280/0x2c0 [ 234.112428][ T5219] ___sys_sendmsg+0x7c/0xc0 [ 234.112834][ T5219] __sys_sendmsg+0x68/0xc4 [ 234.113241][ T5219] __arm64_sys_sendmsg+0x28/0x3c [ 234.113856][ T5219] el0_svc_common.constprop.0+0x74/0x190 [ 234.114332][ T5219] do_el0_svc+0x74/0x90 [ 234.114725][ T5219] el0_svc+0x14/0x20 [ 234.115116][ T5219] el0_sync_handler+0x1a4/0x1b0 [ 234.115540][ T5219] el0_sync+0x190/0x1c0 00:03:53 executing program 0 (fault-call:3 fault-nth:3): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 234.621378][ T5223] FAULT_INJECTION: forcing a failure. [ 234.621378][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 234.622338][ T5223] CPU: 1 PID: 5223 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 234.623035][ T5223] Hardware name: linux,dummy-virt (DT) [ 234.623609][ T5223] Call trace: [ 234.624015][ T5223] dump_backtrace+0x0/0x1b0 [ 234.624462][ T5223] show_stack+0x18/0x70 [ 234.624851][ T5223] dump_stack+0xd0/0x12c [ 234.625327][ T5223] should_fail+0x16c/0x220 [ 234.625769][ T5223] __should_failslab+0x5c/0x80 [ 234.626201][ T5223] should_failslab+0x10/0x2c [ 234.626717][ T5223] __kmalloc_node_track_caller+0x64/0x340 [ 234.627191][ T5223] __kmalloc_reserve.constprop.0+0x68/0x110 [ 234.627666][ T5223] __alloc_skb+0x84/0x1a0 [ 234.628070][ T5223] netlink_sendmsg+0x2ac/0x3e4 [ 234.628489][ T5223] sock_sendmsg+0x54/0x60 [ 234.628887][ T5223] ____sys_sendmsg+0x280/0x2c0 [ 234.629310][ T5223] ___sys_sendmsg+0x7c/0xc0 [ 234.629734][ T5223] __sys_sendmsg+0x68/0xc4 [ 234.630148][ T5223] __arm64_sys_sendmsg+0x28/0x3c [ 234.630581][ T5223] el0_svc_common.constprop.0+0x74/0x190 [ 234.631056][ T5223] do_el0_svc+0x74/0x90 [ 234.631467][ T5223] el0_svc+0x14/0x20 [ 234.631854][ T5223] el0_sync_handler+0x1a4/0x1b0 [ 234.632284][ T5223] el0_sync+0x190/0x1c0 00:03:54 executing program 0 (fault-call:3 fault-nth:4): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:03:54 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) ftruncate(r0, 0xc171) [ 235.201474][ T5227] FAULT_INJECTION: forcing a failure. [ 235.201474][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 235.202754][ T5227] CPU: 1 PID: 5227 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 235.203682][ T5227] Hardware name: linux,dummy-virt (DT) [ 235.204592][ T5227] Call trace: [ 235.204995][ T5227] dump_backtrace+0x0/0x1b0 [ 235.205441][ T5227] show_stack+0x18/0x70 [ 235.206016][ T5227] dump_stack+0xd0/0x12c [ 235.206550][ T5227] should_fail+0x16c/0x220 [ 235.206988][ T5227] __should_failslab+0x5c/0x80 [ 235.207442][ T5227] should_failslab+0x10/0x2c [ 235.207986][ T5227] kmem_cache_alloc+0x64/0x310 [ 235.208518][ T5227] skb_clone+0x58/0xe0 [ 235.208933][ T5227] netlink_deliver_tap+0x250/0x280 [ 235.209395][ T5227] netlink_unicast+0x250/0x320 [ 235.209936][ T5227] netlink_sendmsg+0x1d4/0x3e4 [ 235.210451][ T5227] sock_sendmsg+0x54/0x60 [ 235.210922][ T5227] ____sys_sendmsg+0x280/0x2c0 [ 235.211363][ T5227] ___sys_sendmsg+0x7c/0xc0 [ 235.211855][ T5227] __sys_sendmsg+0x68/0xc4 [ 235.212454][ T5227] __arm64_sys_sendmsg+0x28/0x3c [ 235.212895][ T5227] el0_svc_common.constprop.0+0x74/0x190 [ 235.213452][ T5227] do_el0_svc+0x74/0x90 [ 235.213886][ T5227] el0_svc+0x14/0x20 [ 235.214294][ T5227] el0_sync_handler+0x1a4/0x1b0 [ 235.214762][ T5227] el0_sync+0x190/0x1c0 00:03:54 executing program 0 (fault-call:3 fault-nth:5): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:03:55 executing program 1: r0 = mq_open(&(0x7f0000000080)='\x00\x00\x00\x00t\x00\xf7\x00\xa2P\xfb\x8aR\xa5\x00\x00\x00\x00\x00\x00\x00\xbb\x92\x92A\xb4L', 0x40, 0x3c, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x941c0, 0x0) dup(r1) dup3(r1, r0, 0x0) [ 235.872606][ T5231] FAULT_INJECTION: forcing a failure. [ 235.872606][ T5231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.878522][ T5231] CPU: 1 PID: 5231 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 235.880001][ T5231] Hardware name: linux,dummy-virt (DT) [ 235.880470][ T5231] Call trace: [ 235.880917][ T5231] dump_backtrace+0x0/0x1b0 [ 235.881576][ T5231] show_stack+0x18/0x70 [ 235.882149][ T5231] dump_stack+0xd0/0x12c [ 235.882580][ T5231] should_fail+0x16c/0x220 [ 235.883000][ T5231] should_fail_usercopy+0x1c/0x30 [ 235.883569][ T5231] simple_read_from_buffer+0x68/0x150 [ 235.884129][ T5231] proc_fail_nth_read+0xc8/0x114 [ 235.884671][ T5231] vfs_read+0xac/0x1e0 [ 235.885074][ T5231] ksys_read+0x68/0xfc [ 235.885548][ T5231] __arm64_sys_read+0x20/0x30 [ 235.886110][ T5231] el0_svc_common.constprop.0+0x74/0x190 [ 235.886697][ T5231] do_el0_svc+0x74/0x90 [ 235.887110][ T5231] el0_svc+0x14/0x20 [ 235.887594][ T5231] el0_sync_handler+0x1a4/0x1b0 [ 235.888158][ T5231] el0_sync+0x190/0x1c0 00:03:55 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c881}, 0x8000) 00:03:55 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0xc0c82, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90800) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x1, 0xff, 0x8c, 0x9, 0x5}) ftruncate(r0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = dup(r3) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000000100)=0x8) r5 = dup(r2) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=""/8}) 00:03:56 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000140)=""/193, 0xc1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup(r2) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}}) dup3(r1, r0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = dup(r4) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4004001) 00:04:05 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4) 00:04:05 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x100) read$char_raw(r1, &(0x7f0000000200)={""/25575}, 0x6400) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = dup(r3) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 00:04:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r0, 0x80000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x321, 0x80}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x208c0}, 0x40000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = dup(r4) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000280)={0xc, {0xdc, "13f8115caae9363b4693430884fb436324a328cb67395c01302918cee8ff42fd2b8c310127ba365d95df68ee721c79d16dae1ceccaa6ef8515f3e30a0b8b22369f37b5cc2f7adfd36042a6f89c17b917d86dd76c20557047bcbcca61892f2550e59e6efcb8408274c05125e582568c376f1401b2e79d2c7225bc41300758bc4b496e1c20aa05503e8ebc557929bce12d5556e72dd053535ad7fd888f0a8d392767e75c7f86ef28c6851f281b23e8b5c97e6b9780c7ba6a106c94a9ece1ca60153db4f6e32924e9e860c22a67a7e0ffbb99b359be83d9f6ebe04402e0"}}, 0xe2) 00:04:06 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = dup(r0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, 0x0) recvmmsg(r1, &(0x7f00000088c0)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)}], 0x6}}, {{&(0x7f0000000580)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f0000000740)=""/228, 0xe4}], 0x3}, 0x7b3a85ff}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000000a00)=""/99, 0x63}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/36, 0x24}, {&(0x7f0000000bc0)=""/142, 0x8e}], 0x7, &(0x7f0000000d00)=""/31, 0x1f}, 0x4}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f0000000e80)=""/182, 0xb6}, {&(0x7f0000000f40)=""/102, 0x66}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/63, 0x3f}, {&(0x7f00000010c0)=""/204, 0xcc}, {&(0x7f00000011c0)=""/145, 0x91}, {&(0x7f0000001280)=""/26, 0x1a}], 0x9, &(0x7f0000001380)=""/4096, 0x1000}}, {{&(0x7f0000002380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002400)=""/14, 0xe}, {&(0x7f0000002440)=""/133, 0x85}, {&(0x7f0000002500)=""/71, 0x47}, {&(0x7f0000002580)=""/91, 0x5b}, {&(0x7f0000002600)=""/23, 0x17}, {&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/192, 0xc0}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/63, 0x3f}, {&(0x7f0000002880)=""/107, 0x6b}], 0xa}, 0x3}, {{&(0x7f00000029c0)=@x25, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/228, 0xe4}], 0x1}, 0x5}, {{&(0x7f0000002b80)=@isdn, 0x80, &(0x7f0000004f80)=[{&(0x7f0000002c00)=""/151, 0x97}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/203, 0xcb}, {&(0x7f0000003dc0)=""/122, 0x7a}, {&(0x7f0000003e40)=""/118, 0x76}, {&(0x7f0000003ec0)=""/170, 0xaa}, {&(0x7f0000003f80)=""/4096, 0x1000}], 0x7}, 0x8}, {{&(0x7f0000005000)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000005080)=""/190, 0xbe}], 0x1, &(0x7f0000005180)=""/205, 0xcd}, 0x80000000}, {{&(0x7f0000005280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000084c0)=[{&(0x7f0000005300)=""/211, 0xd3}, {&(0x7f0000005400)=""/35, 0x23}, {&(0x7f0000005440)=""/18, 0x12}, {&(0x7f0000005480)=""/49, 0x31}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/4096, 0x1000}], 0x7, &(0x7f0000008540)=""/239, 0xef}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000008640)=""/202, 0xca}, {&(0x7f0000008740)=""/21, 0x15}, {&(0x7f0000008780)=""/144, 0x90}], 0x3, &(0x7f0000008880)=""/60, 0x3c}, 0x7}], 0xa, 0x1, &(0x7f0000008b40)={0x77359400}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup(r4) dup3(r3, r4, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = dup(r5) ioctl$HIDIOCGRAWINFO(r6, 0x80084803, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000000), 0x4) 00:04:07 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000140)=0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:15 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@remote, r3}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000001200)={@remote, r7}, 0x70) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001240)=ANY=[@ANYBLOB="9c090000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf250c000000040000001401020076657468315f766c080001000000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32, @ANYBLOB="08008100b3c364102ebc23c231b18e07189a75dfc97f951d8bd9b0d6bd6c1636276ec65e60ab89df", @ANYRES32=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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"], 0x99c}, 0x1, 0x0, 0x0, 0x5}, 0x24040010) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x71829b9bb4130e68) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000000011c58d84416c2216cc9bca690be476b9956a18918651fd378a1d1de50226a6b31c8deed473f81bb8893eb09720a2a997706305a1203b54e78e45cc0b6c3919f4245232c7fca2918298bd7792b6ed22a886ed377927f554e4f230eb0f41509334868422cbdbba540944317ac6372dd4392cf23524bba73816c82624cb7d377937cc47b6a2651a3272fba9091a2ed575b2da995660027a4159f58d2435cb6a52456d2462bc685c29f8c2f333208f9891ee0c05a14f29c2c3f682c90d5de8752cb8d04ab401f4a9dbac71937a6a1933354510247146b8f3512a7518690d9fb72a3b524a7948216ffa0e", @ANYRES16=0x0, @ANYBLOB="100225bd7000ffdbdf2505000000060001006800000014000600fe8000000000000000000000000000bb14000500000000000000000000000000000000011400060000000000000000000000000000000000f5ff0b00010000000800080000000000080004000300000014000600fe8800000000000000000000000000010800040003000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040044) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000280)) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = dup3(r9, r8, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r11, 0xaa59dd8beebb260, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 00:04:16 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup(r2) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) dup3(r1, r3, 0x80000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:16 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x14142) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x80, 0x2, 0x8}}, 0x14) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup(r3) fcntl$setsig(r3, 0xa, 0x12) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x5a1280, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000180)=0x1) 00:04:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9fb, 0x23}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000024}, 0x48840) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r2, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x13, r2, 0x82000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup(r2) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) dup(r4) dup3(r1, r1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 00:04:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup3(r2, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x2, 0x20}, {0x0, 0x8c}, {0x101, 0x187}, {0x17, 0x9b}]}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8c}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008884) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r3, 0x30, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xa0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:19 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = dup(r2) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) accept4$tipc(r3, 0x0, &(0x7f0000000000), 0x0) 00:04:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup(r1) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x4) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xe2200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000180)) 00:04:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 00:04:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:04:29 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) dup(r1) r2 = dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = dup(r4) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCGPGRP(r7, 0x540f, 0x0) dup3(r3, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xfffffffffffffdf9) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1, 0x0) fsetxattr(r8, &(0x7f0000000280)=@known='com.apple.system.Security\x00', &(0x7f00000002c0)='@\x00', 0x2, 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 270.418543][ T5300] ------------[ cut here ]------------ [ 270.419291][ T5300] kernel BUG at kernel/power/snapshot.c:257! [ 270.419940][ T5300] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP [ 270.420567][ T5300] Modules linked in: [ 270.421150][ T5300] CPU: 0 PID: 5300 Comm: syz-executor.0 Not tainted 5.11.0-rc6-syzkaller-00055-g3aaf0a27ffc2 #0 [ 270.423117][ T5300] Hardware name: linux,dummy-virt (DT) [ 270.424552][ T5300] pstate: 20400009 (nzCv daif +PAN -UAO -TCO BTYPE=--) [ 270.425442][ T5300] pc : memory_bm_free+0x260/0x320 [ 270.425984][ T5300] lr : free_basic_memory_bitmaps+0x3c/0x90 [ 270.426476][ T5300] sp : ffff80001599bc50 [ 270.426833][ T5300] x29: ffff80001599bc50 x28: fcff00002388e070 [ 270.427565][ T5300] x27: ffff800012d4c000 x26: fcff00002388e008 [ 270.428195][ T5300] x25: f2ff000022fba400 x24: ffff800012d4c000 [ 270.428808][ T5300] x23: 00007fffffffffff x22: fcff00002388e018 [ 270.429422][ T5300] x21: 0000000000000001 x20: ffff800013b576d0 [ 270.430058][ T5300] x19: f2ff000022fba400 x18: 0000000000000000 [ 270.430715][ T5300] x17: 0000000000000000 x16: 0000000000000000 [ 270.431348][ T5300] x15: 0000000000000000 x14: 0000000000000000 [ 270.431965][ T5300] x13: 0000000000000000 x12: 0000000000000000 [ 270.432574][ T5300] x11: 0000000000000000 x10: 0000000000000000 [ 270.433194][ T5300] x9 : 0000000000000000 x8 : 0000000000000000 [ 270.434070][ T5300] x7 : 0000000000000000 x6 : 00000000000001ff [ 270.434672][ T5300] x5 : 0000000000000000 x4 : 0000000000000000 [ 270.435275][ T5300] x3 : ffff800013b576d0 x2 : f8ff000023852000 [ 270.436047][ T5300] x1 : 0000000000000001 x0 : 0700000023852000 [ 270.436735][ T5300] Call trace: [ 270.437070][ T5300] memory_bm_free+0x260/0x320 [ 270.437704][ T5300] free_basic_memory_bitmaps+0x3c/0x90 [ 270.438173][ T5300] snapshot_release+0x74/0x90 [ 270.438594][ T5300] __fput+0x78/0x230 [ 270.438974][ T5300] ____fput+0x10/0x20 [ 270.439380][ T5300] task_work_run+0x80/0x160 [ 270.439779][ T5300] do_notify_resume+0x20c/0x13e0 [ 270.440211][ T5300] work_pending+0xc/0x3d4 [ 270.440940][ T5300] Code: cb000260 d34cfc00 97fcf6fe 35fffc20 (d4210000) [ 270.442232][ T5300] ---[ end trace 76aec67cfd9d5599 ]--- [ 270.442866][ T5300] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 270.443951][ T5300] SMP: stopping secondary CPUs [ 270.445007][ T5300] Kernel Offset: disabled [ 270.445356][ T5300] CPU features: 0x0a7e0952,61e0a830 [ 270.445996][ T5300] Memory Limit: none [ 270.446569][ T5300] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:04:43 Registers: info registers vcpu 0 PC=ffff8000119363d8 X00=ffff8000119363d0 X01=0000000000000000 X02=0000000000000000 X03=ffff800012b5a400 X04=ffff80001599b730 X05=f0ff00002223ad00 X06=0000000000000000 X07=00000000ffffffc8 X08=ffff80001599b890 X09=ffff80001599b890 X10=00000000ffffe000 X11=ffff8000139ab450 X12=ffff80001599b580 X13=00000000000006c5 X14=6f4e20302e726f74 X15=0000000000000020 X16=0000000000000000 X17=0000000000000000 X18=00000000fffffffb X19=ffff8000139dd3c8 X20=ffff8000139dd3c0 X21=0000000000000000 X22=0000000000000004 X23=ffff8000139dd3c8 X24=0000000000000028 X25=ffff800012b5a400 X26=0000000000000000 X27=00000000000014b4 X28=f0ff00002223ad00 X29=ffff80001599b580 X30=539980001013a0c0 SP=ffff80001599b580 PSTATE=204003c9 --C- EL2h BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=65725f7265766f63:000000756c6c2570 Z02=7268745f746e6572:727563203a746573 Z03=0000000000000000:ffffff0000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:4010040000000400 Z06=0000000000000000:0000000000000000 Z07=4010040140100401:4010040140100401 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000005404:0000000000005404 Z17=000000ff0000ff00:000000ff0000ff00 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000119363d8 X00=ffff8000119363d0 X01=0000000000000000 X02=ffff800013884000 X03=0000000010000000 X04=0017d78400000000 X05=00ffffffffffffff X06=000000041939f29c X07=7fffffffffffffff X08=0000003ed1ede080 X09=00000000035c5603 X10=0000000000000346 X11=0000000000000001 X12=0000000000000008 X13=0000000000000001 X14=0000000000000346 X15=000080a83b142100 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff8000139dd3c8 X20=ffff8000139dd3c0 X21=0000000000000000 X22=0000000000000004 X23=ffff8000139dd3c8 X24=0000000000000028 X25=ffff800010008000 X26=ffff80001000c000 X27=0000000000000000 X28=f0ff00000b1ee900 X29=ffff80001000bec0 X30=76b580001013a0c0 SP=ffff80001000bec0 PSTATE=20400089 --C- EL2h BTYPE=0 FPCR=00000000 FPSR=00000010 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:3fdacc99b9ddab03 Z01=0000000000000000:41731ac100000000 Z02=0000000000000000:40031ae3743f8581 Z03=a37f18a7dba05968:a3c09fc80bb2a2a4 Z04=0000000000000000:122f27746e1fb885 Z05=0000000000000000:ef2a698e0965dc8e Z06=0000000000000000:d5f9cb5216fb7923 Z07=0000000000000000:9a1de268b3cc0128 Z08=0000000000000000:3fbe84ca866183c0 Z09=0000000000000000:3fd601c1599c773f Z10=0000000000000000:3fe0000000000000 Z11=0000000000000000:6a2f86c0a37b713d Z12=0000000000000000:1ea823ef39cd79f9 Z13=0000000000000000:cc712668e3de3f25 Z14=0000000000000000:e671b4c53e220083 Z15=0000000000000000:de36909b4b363968 Z16=0000000000000000:72351b3a1d11afc6 Z17=0000000000000000:8f1bbcdc8f1bbcdc Z18=0000000000000000:ca62c1d6ca62c1d6 Z19=0000000000000000:6ed9eba15a827999 Z20=0000000000000000:000000000f40ad6c Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000002:0000000070065296 Z31=0000000000000000:0000000000000000