80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1240.427860] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:37:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 0: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6000000}, 0x34) 17:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) 17:37:50 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1240.505479] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:37:50 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7000000}, 0x34) 17:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1240.577565] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:37:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, r0) 17:37:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x34) 17:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1240.667426] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1240.696070] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:37:50 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1240.721065] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:37:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9000000}, 0x34) 17:37:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa000000}, 0x34) 17:37:50 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:50 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 2: socketpair(0x0, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb000000}, 0x34) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:51 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc000000}, 0x34) 17:37:51 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd000000}, 0x34) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x98041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe000000}, 0x34) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(0x0, 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf000000}, 0x34) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r4 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xe, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @ldst={0x0, 0x2, 0x1, 0x9, 0x2, 0x0, 0x19}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x1, 0x1, 0x5, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0xa, '\x00', 0x0, 0xa, r5, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x5, 0x17b}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f00000004c0)=[r7, r2]}, 0x80) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000}, 0x34) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x98041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r4 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xe, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @ldst={0x0, 0x2, 0x1, 0x9, 0x2, 0x0, 0x19}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x1, 0x1, 0x5, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0xa, '\x00', 0x0, 0xa, r5, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x5, 0x17b}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f00000004c0)=[r7, r2]}, 0x80) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11000000}, 0x34) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4a03) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000ac0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12000000}, 0x34) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:51 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) socketpair(0x9, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pptp(r1, 0x0, 0x10000000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "3dec0e003dac39dfd4f8807d52bdb9b3", "5c94f427", "1d3cdd9c2b92a73f"}, 0x28) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000ac0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13000000}, 0x34) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x301, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7f4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_FRAME={0x7d3, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_b, @device_a, {0x0, 0x78}, @device_b}, {0xd, 0x1, 0x3, 0x0, 0x3e}}, {@type11={{0x0, 0x2, 0xa}, {0x1f}, @device_b, @device_a, @random="b7a832287808", {0xe, 0x81}, @device_b}, {0x5, 0x0, 0x1, 0x1, 0x80}}}, @ver_80211n={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008014) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14000000}, 0x34) 17:37:51 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000ac0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x0, 0x2}, 0x34) 17:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18000000}, 0x34) 17:37:51 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x0, 0x2}, 0x34) 17:37:51 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000"], 0x2c}}, 0x0) 17:37:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newchain={0x2c, 0x64, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0x163c018c6c9f276d, 0xfffe}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x8042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x0, 0x2}, 0x34) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x34) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x34) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:52 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x34) 17:37:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, [@call={0x85, 0x0, 0x0, 0x5f}, @jmp={0x5, 0x1, 0x9, 0x8, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x8, 0x8, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_fd={0x18, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x33, &(0x7f0000000080)=""/51, 0x40f00, 0x5, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x24, 0x3, 0x1}, 0x10, 0x198de, r1, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r0]}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r2) ioctl$NBD_SET_SOCK(r0, 0x125d, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x14, 0x0, 0x7, &(0x7f0000000280)=[0x0], 0x1}, 0x20) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x34) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x0, 0x2}, 0x34) 17:37:52 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf25020000000c0008001a3a0000000000002c00078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08060100", @ANYRES32=r5, @ANYBLOB="0c00050000000000000000000c00020006000000000000000c00050000000000000000000c0002000500000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) connect$pptp(r1, 0x0, 0x10) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, 0x34) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x0, 0x2}, 0x34) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x0, 0x2}, 0x34) 17:37:52 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x34) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x34) 17:37:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xb, 0xfffffff9) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r4, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, '/dev/ubi_ctrl\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20000880) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x34) 17:37:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x401070c9, 0xffffffffffffffff) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:52 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 17:37:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40081271, 0xffffffffffffffff) 17:37:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x34) 17:37:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:37:52 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 17:37:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x34) 17:37:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4}, 0x34) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) [ 1242.976749] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x34) 17:37:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) [ 1243.102165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4}, 0x34) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x34) 17:37:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4}, 0x34) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x34) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) [ 1243.226522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x34) 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, 0x34) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400010000"], 0x2c}}, 0x0) 17:37:53 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11}, 0x34) [ 1243.476165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12}, 0x34) [ 1243.602777] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13}, 0x34) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:53 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1243.787363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:53 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:37:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14}, 0x34) 17:37:53 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:53 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x34) 17:37:54 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) [ 1243.925264] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:54 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, 0x34) 17:37:54 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) [ 1244.058310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500}, 0x34) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x127f, 0xffffffffffffffff) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600}, 0x34) [ 1244.158470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1244.190054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x700}, 0x34) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xc6, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @initial, {0x8, 0x18d}}, @tdls_teardown={0xc, 0x3, {0x3e, {0x37, 0x90, {0xc9, 0x3, "750042f2d6bd962b48c9dc5dd34a8f8e", "03fb33c69d03f8763d702cb50372a2a97a665dbab5acb1db9465c5fca5dae6e3", "2cc783aa360ac6902552994b95823766dd69d6d87d415b9647076069c0c667d2", [{0x4, 0x15, "bc31978c78054f5134f6ee0b20e6695ea1dc83503f"}, {0x1, 0xd, "64959a00ca6ef158659d20e162"}, {0x4, 0x16, "24633519e9d3f38fc7d106632c69398f1d47389ac0de"}]}}, {0x65, 0x12, {@from_mac, @device_b, @broadcast}}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0xff}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x3f}}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40014}, 0x44881) connect$pptp(r0, 0x0, 0x10000000) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x900}, 0x34) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00}, 0x34) 17:37:54 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1267, 0xffffffffffffffff) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb00}, 0x34) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1269, 0xffffffffffffffff) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (fail_nth: 1) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00}, 0x34) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (fail_nth: 1) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00}, 0x34) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:54 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:54 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x2, 0xffffffffffffffff) 17:37:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe00}, 0x34) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x2, 0xffffffffffffffff) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5450, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf00}, 0x34) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5451, 0xffffffffffffffff) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100}, 0x34) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5450, 0xffffffffffffffff) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200}, 0x34) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1300}, 0x34) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5460, 0xffffffffffffffff) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5451, 0xffffffffffffffff) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400}, 0x34) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40049409, 0xffffffffffffffff) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5460, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800}, 0x34) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, 0x0, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4020940d, 0xffffffffffffffff) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x40049409, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, 0x34) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, 0x0, 0x0) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x4020940d, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000}, 0x34) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, 0x0, 0x0) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, 0x34) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0189436, 0xffffffffffffffff) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x34) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 17:37:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc020660b, 0xffffffffffffffff) 17:37:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 1245.856015] validate_nla: 56 callbacks suppressed [ 1245.856024] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:37:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5000000}, 0x34) 17:37:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0189436, 0xffffffffffffffff) 17:37:55 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6000000}, 0x34) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc020660b, 0xffffffffffffffff) 17:37:56 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000000580)=0x27) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4084800}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x81, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf25020000400c00060002000000000002000c000800be00000000000000"], 0x2c}}, 0x80) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2dc, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x2a}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7fff}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "694cc2"}, @NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "c25206241847c81dc254d67ed502ed0301dd7520a993b4d09a257d9a2f049598fe37f97906c9d3759a15b2568d7608ddc6edba012f108f7ab5e97f7a5ac8912aa1ea74f8df31b45a123bbbaad624bf0b2d84e7abb3c8b8ae3a5d87efb3fed0f9c52ed04fd901cebd8a3eb7f2b7f5c0309195"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x43, 0xfc, "93392b2f559f40bd979bd8a0aa233f57b5622290ea7fc5c6f71ee1950bcbea239562b47a50b081eb1b98eced805d1707b7dcad7d3e9032f481d81f360f417a"}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "c04c797f42b5e85f31747338302e93080e1c8c1a40389b2212c1eb8dfa3cac8a352501708bec0043640e59fdab17747ae2914b60abd2d1530f420d9b87db17cb9f205d4b74762ce0522cebda5bcf364ea07a10c56d90f2d6c7b6d7e48293765c73beab2f439426816d9b164487a6e5232484afc8099e114e0527e3331694050da993bcc8bb5940f2e7d788e782a4497cb3c361"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "7cd8ce84e2"}], @NL80211_ATTR_IE={0xbf, 0x2a, [@dsss={0x3, 0x1, 0x30}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1}}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0x1}, {0x36, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xc7, 0x1}}, @random={0xff, 0x89, "2ed617b9c75510438828a2b778b56755c403fbb74be3074320d35f6b7cba971150253c7113fc098a7fea37f3c6494b3a88c962c37be02385e1eb4a95a75e7db543a58b4b1c6c4cbdd35994f997b6c67726e3bfcb96be3f334c5b612bdc77c7c56cb07c0e9bc5e14ddf15677d9a7600d8aaaf5f3945032048d6494f89189e1262ce09d222f6f71c87fe"}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@link_id={0x65, 0x12}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x2, 0x0, {0x7, 0x20, 0x0, 0x8, 0x0, 0x1}, 0x8, 0x9, 0x9}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x11, {0x0, 0x6, 0x5c, "c7e538385f754e2439e9d23e8bb1"}}, @chsw_timing={0x68, 0x4, {0x40, 0xfff}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x1f, 0x3f, @broadcast, 0x8, 0x8, 0x1}}, @cf={0x4, 0x6, {0x0, 0x7a, 0x6, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x2}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xfffffd70, &(0x7f0000000300)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd23, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x1401, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x80004) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r10) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x20000044) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 17:37:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xc0045878, 0xffffffffffffffff) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000}, 0x34) [ 1246.127139] nbd: must specify an index to disconnect 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000000580)=0x27) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4084800}, 0x10) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x81, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf25020000400c00060002000000000002000c000800be00000000000000"], 0x2c}}, 0x80) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2dc, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x2a}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7fff}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "694cc2"}, @NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "c25206241847c81dc254d67ed502ed0301dd7520a993b4d09a257d9a2f049598fe37f97906c9d3759a15b2568d7608ddc6edba012f108f7ab5e97f7a5ac8912aa1ea74f8df31b45a123bbbaad624bf0b2d84e7abb3c8b8ae3a5d87efb3fed0f9c52ed04fd901cebd8a3eb7f2b7f5c0309195"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x43, 0xfc, "93392b2f559f40bd979bd8a0aa233f57b5622290ea7fc5c6f71ee1950bcbea239562b47a50b081eb1b98eced805d1707b7dcad7d3e9032f481d81f360f417a"}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "c04c797f42b5e85f31747338302e93080e1c8c1a40389b2212c1eb8dfa3cac8a352501708bec0043640e59fdab17747ae2914b60abd2d1530f420d9b87db17cb9f205d4b74762ce0522cebda5bcf364ea07a10c56d90f2d6c7b6d7e48293765c73beab2f439426816d9b164487a6e5232484afc8099e114e0527e3331694050da993bcc8bb5940f2e7d788e782a4497cb3c361"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "7cd8ce84e2"}], @NL80211_ATTR_IE={0xbf, 0x2a, [@dsss={0x3, 0x1, 0x30}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1}}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0x1}, {0x36, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xc7, 0x1}}, @random={0xff, 0x89, "2ed617b9c75510438828a2b778b56755c403fbb74be3074320d35f6b7cba971150253c7113fc098a7fea37f3c6494b3a88c962c37be02385e1eb4a95a75e7db543a58b4b1c6c4cbdd35994f997b6c67726e3bfcb96be3f334c5b612bdc77c7c56cb07c0e9bc5e14ddf15677d9a7600d8aaaf5f3945032048d6494f89189e1262ce09d222f6f71c87fe"}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@link_id={0x65, 0x12}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x2, 0x0, {0x7, 0x20, 0x0, 0x8, 0x0, 0x1}, 0x8, 0x9, 0x9}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x11, {0x0, 0x6, 0x5c, "c7e538385f754e2439e9d23e8bb1"}}, @chsw_timing={0x68, 0x4, {0x40, 0xfff}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x1f, 0x3f, @broadcast, 0x8, 0x8, 0x1}}, @cf={0x4, 0x6, {0x0, 0x7a, 0x6, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x2}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4080) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xfffffd70, &(0x7f0000000300)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd23, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x1401, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x80004) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r10) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x20000044) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000}, 0x34) 17:37:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9000000}, 0x34) 17:37:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) [ 1246.318565] nbd: must specify an index to disconnect 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 17:37:56 executing program 0: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5421, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/39, &(0x7f0000000580)=0x27) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4084800}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x81, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf25020000400c00060002000000000002000c000800be00000000000000"], 0x2c}}, 0x80) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2dc, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x2a}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7fff}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "694cc2"}, @NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "c25206241847c81dc254d67ed502ed0301dd7520a993b4d09a257d9a2f049598fe37f97906c9d3759a15b2568d7608ddc6edba012f108f7ab5e97f7a5ac8912aa1ea74f8df31b45a123bbbaad624bf0b2d84e7abb3c8b8ae3a5d87efb3fed0f9c52ed04fd901cebd8a3eb7f2b7f5c0309195"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x43, 0xfc, "93392b2f559f40bd979bd8a0aa233f57b5622290ea7fc5c6f71ee1950bcbea239562b47a50b081eb1b98eced805d1707b7dcad7d3e9032f481d81f360f417a"}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "c04c797f42b5e85f31747338302e93080e1c8c1a40389b2212c1eb8dfa3cac8a352501708bec0043640e59fdab17747ae2914b60abd2d1530f420d9b87db17cb9f205d4b74762ce0522cebda5bcf364ea07a10c56d90f2d6c7b6d7e48293765c73beab2f439426816d9b164487a6e5232484afc8099e114e0527e3331694050da993bcc8bb5940f2e7d788e782a4497cb3c361"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "7cd8ce84e2"}], @NL80211_ATTR_IE={0xbf, 0x2a, [@dsss={0x3, 0x1, 0x30}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1}}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0x1}, {0x36, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xc7, 0x1}}, @random={0xff, 0x89, "2ed617b9c75510438828a2b778b56755c403fbb74be3074320d35f6b7cba971150253c7113fc098a7fea37f3c6494b3a88c962c37be02385e1eb4a95a75e7db543a58b4b1c6c4cbdd35994f997b6c67726e3bfcb96be3f334c5b612bdc77c7c56cb07c0e9bc5e14ddf15677d9a7600d8aaaf5f3945032048d6494f89189e1262ce09d222f6f71c87fe"}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@link_id={0x65, 0x12}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x2, 0x0, {0x7, 0x20, 0x0, 0x8, 0x0, 0x1}, 0x8, 0x9, 0x9}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x11, {0x0, 0x6, 0x5c, "c7e538385f754e2439e9d23e8bb1"}}, @chsw_timing={0x68, 0x4, {0x40, 0xfff}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x1f, 0x3f, @broadcast, 0x8, 0x8, 0x1}}, @cf={0x4, 0x6, {0x0, 0x7a, 0x6, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x2}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x4080) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xfffffd70, &(0x7f0000000300)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd23, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) (async) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x1401, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x80004) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r10) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440c4}, 0x20000044) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) 17:37:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5450, 0xffffffffffffffff) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa000000}, 0x34) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1246.486694] nbd: must specify an index to disconnect 17:37:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xa0000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000480)=""/26) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23003f64c279c29cd9", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100006c0000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20054010}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) memfd_create(&(0x7f0000000440)='/dev/ashmem\x00', 0x3) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r8) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_IE={0xf1, 0x2a, [@ibss={0x6, 0x2, 0x4}, @supported_rates={0x1, 0x3, [{0x36, 0x1}, {0x12}, {0x3, 0x1}]}, @perr={0x84, 0xe2, {0x90, 0xe, [@not_ext={{}, @device_a, 0x4, "", 0x30}, @not_ext={{}, @device_b, 0x4, "", 0x1a}, @ext={{}, @device_b, 0x1, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_b, 0x8, "", 0x13}, @ext={{}, @device_a, 0x7a, @device_a, 0x22}, @not_ext={{}, @broadcast, 0xb8, "", 0x41}, @ext={{}, @broadcast, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0x1, @device_a, 0x14}, @ext={{}, @broadcast, 0x100, @device_a, 0x16}, @ext={{}, @device_a, 0x0, @device_b, 0x35}, @ext={{}, @device_a, 0x6, @broadcast, 0x2e}, @not_ext={{}, @device_a, 0x5, "", 0x29}, @not_ext={{}, @device_b, 0x1ff, "", 0x3d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x11c}}, 0x801) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5], 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb000000}, 0x34) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000020000000400010000006a00"/38], 0x2c}}, 0x0) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5], 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc000000}, 0x34) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:37:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xa0000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000480)=""/26) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23003f64c279c29cd9", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100006c0000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20054010}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) memfd_create(&(0x7f0000000440)='/dev/ashmem\x00', 0x3) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async, rerun: 32) ioctl$NBD_SET_SOCK(r1, 0xab00, r8) (async, rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_IE={0xf1, 0x2a, [@ibss={0x6, 0x2, 0x4}, @supported_rates={0x1, 0x3, [{0x36, 0x1}, {0x12}, {0x3, 0x1}]}, @perr={0x84, 0xe2, {0x90, 0xe, [@not_ext={{}, @device_a, 0x4, "", 0x30}, @not_ext={{}, @device_b, 0x4, "", 0x1a}, @ext={{}, @device_b, 0x1, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_b, 0x8, "", 0x13}, @ext={{}, @device_a, 0x7a, @device_a, 0x22}, @not_ext={{}, @broadcast, 0xb8, "", 0x41}, @ext={{}, @broadcast, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0x1, @device_a, 0x14}, @ext={{}, @broadcast, 0x100, @device_a, 0x16}, @ext={{}, @device_a, 0x0, @device_b, 0x35}, @ext={{}, @device_a, 0x6, @broadcast, 0x2e}, @not_ext={{}, @device_a, 0x5, "", 0x29}, @not_ext={{}, @device_b, 0x1ff, "", 0x3d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x11c}}, 0x801) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (rerun: 64) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5], 0x2c}}, 0x0) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd000000}, 0x34) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400400) socketpair(0x28, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:37:56 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1246.739170] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:37:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xa0000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000480)=""/26) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23003f64c279c29cd9", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100006c0000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20054010}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) memfd_create(&(0x7f0000000440)='/dev/ashmem\x00', 0x3) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r8) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_IE={0xf1, 0x2a, [@ibss={0x6, 0x2, 0x4}, @supported_rates={0x1, 0x3, [{0x36, 0x1}, {0x12}, {0x3, 0x1}]}, @perr={0x84, 0xe2, {0x90, 0xe, [@not_ext={{}, @device_a, 0x4, "", 0x30}, @not_ext={{}, @device_b, 0x4, "", 0x1a}, @ext={{}, @device_b, 0x1, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_b, 0x8, "", 0x13}, @ext={{}, @device_a, 0x7a, @device_a, 0x22}, @not_ext={{}, @broadcast, 0xb8, "", 0x41}, @ext={{}, @broadcast, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0x1, @device_a, 0x14}, @ext={{}, @broadcast, 0x100, @device_a, 0x16}, @ext={{}, @device_a, 0x0, @device_b, 0x35}, @ext={{}, @device_a, 0x6, @broadcast, 0x2e}, @not_ext={{}, @device_a, 0x5, "", 0x29}, @not_ext={{}, @device_b, 0x1ff, "", 0x3d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x11c}}, 0x801) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe000000}, 0x34) 17:37:56 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400400) (async) socketpair(0x28, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:37:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5], 0x2c}}, 0x0) 17:37:57 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf000000}, 0x34) 17:37:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xa0000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000480)=""/26) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="23003f64c279c29cd9", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100006c0000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20054010}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) memfd_create(&(0x7f0000000440)='/dev/ashmem\x00', 0x3) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r8) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_IE={0xf1, 0x2a, [@ibss={0x6, 0x2, 0x4}, @supported_rates={0x1, 0x3, [{0x36, 0x1}, {0x12}, {0x3, 0x1}]}, @perr={0x84, 0xe2, {0x90, 0xe, [@not_ext={{}, @device_a, 0x4, "", 0x30}, @not_ext={{}, @device_b, 0x4, "", 0x1a}, @ext={{}, @device_b, 0x1, @broadcast, 0x25}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_b, 0x8, "", 0x13}, @ext={{}, @device_a, 0x7a, @device_a, 0x22}, @not_ext={{}, @broadcast, 0xb8, "", 0x41}, @ext={{}, @broadcast, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0x1, @device_a, 0x14}, @ext={{}, @broadcast, 0x100, @device_a, 0x16}, @ext={{}, @device_a, 0x0, @device_b, 0x35}, @ext={{}, @device_a, 0x6, @broadcast, 0x2e}, @not_ext={{}, @device_a, 0x5, "", 0x29}, @not_ext={{}, @device_b, 0x1ff, "", 0x3d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x11c}}, 0x801) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400400) (async) socketpair(0x28, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:37:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 1) 17:37:57 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, 0x34) 17:37:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11000000}, 0x34) [ 1247.262571] FAULT_INJECTION: forcing a failure. [ 1247.262571] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.287542] CPU: 0 PID: 24030 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1247.295444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1247.304804] Call Trace: [ 1247.307404] dump_stack+0x1fc/0x2ef 17:37:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000740)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x140b, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000be0400", @ANYRES16=0x0, @ANYBLOB="517623ec0266856fffff0300", @ANYRES32=0x0, @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x50) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x18000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r6) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x214100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r8, &(0x7f0000000280)="83cc94130c8832e4ccd3e5bd03c43ed1f607b28513ee9bd113525d43dfe3cebf6835911bd2fbdaf3f0072382df58059b612b913a30cef0afb87e30fe49a200c3554cad56d9baa9bb87ad0b9b4f0077e92a2539abdee429f4ad78e2a95e3da62d99ac2ffc0bd51b998d8c3662431bd6d1d7a9ef3f485f3a756c230077928ef772141a7643dea4aae7459b8e8957f143aa25dcdb4a48fc85be3888bbf309c79ab1a2abb00a0f6da38a6df654f267dcd8664b2d652c6688e1eeb4e181", &(0x7f0000000480)=""/227}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x48001) [ 1247.311049] should_fail.cold+0xa/0xf [ 1247.314855] ? setup_fault_attr+0x200/0x200 [ 1247.319182] ? lock_acquire+0x170/0x3c0 [ 1247.323165] __should_failslab+0x115/0x180 [ 1247.327403] should_failslab+0x5/0x10 [ 1247.331205] kmem_cache_alloc_node+0x245/0x3b0 [ 1247.335802] __alloc_skb+0x71/0x560 [ 1247.339445] netlink_sendmsg+0x9f6/0xc50 [ 1247.343512] ? aa_af_perm+0x230/0x230 [ 1247.347314] ? nlmsg_notify+0x1f0/0x1f0 [ 1247.351285] ? kernel_recvmsg+0x220/0x220 [ 1247.355443] ? nlmsg_notify+0x1f0/0x1f0 [ 1247.359423] sock_sendmsg+0xc3/0x120 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12000000}, 0x34) [ 1247.363151] ___sys_sendmsg+0x7bb/0x8e0 [ 1247.367133] ? check_preemption_disabled+0x41/0x280 [ 1247.372156] ? copy_msghdr_from_user+0x440/0x440 [ 1247.376915] ? __fget+0x32f/0x510 [ 1247.380380] ? lock_downgrade+0x720/0x720 [ 1247.384538] ? check_preemption_disabled+0x41/0x280 [ 1247.386384] nbd: must specify an index to disconnect [ 1247.389561] ? check_preemption_disabled+0x41/0x280 [ 1247.389582] ? __fget+0x356/0x510 [ 1247.389597] ? do_dup2+0x450/0x450 [ 1247.389615] ? lock_downgrade+0x720/0x720 17:37:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000740)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000841) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x140b, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000be0400", @ANYRES16=0x0, @ANYBLOB="517623ec0266856fffff0300", @ANYRES32=0x0, @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x50) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x18000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r6) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x214100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r8, &(0x7f0000000280)="83cc94130c8832e4ccd3e5bd03c43ed1f607b28513ee9bd113525d43dfe3cebf6835911bd2fbdaf3f0072382df58059b612b913a30cef0afb87e30fe49a200c3554cad56d9baa9bb87ad0b9b4f0077e92a2539abdee429f4ad78e2a95e3da62d99ac2ffc0bd51b998d8c3662431bd6d1d7a9ef3f485f3a756c230077928ef772141a7643dea4aae7459b8e8957f143aa25dcdb4a48fc85be3888bbf309c79ab1a2abb00a0f6da38a6df654f267dcd8664b2d652c6688e1eeb4e181", &(0x7f0000000480)=""/227}, 0x20) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x48001) [ 1247.410811] ? vfs_write+0x3d7/0x540 [ 1247.414549] ? __fdget+0x1d0/0x230 [ 1247.418102] __x64_sys_sendmsg+0x132/0x220 [ 1247.422339] ? __sys_sendmsg+0x1b0/0x1b0 [ 1247.426404] ? vfs_write+0x393/0x540 [ 1247.430133] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1247.435501] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1247.440520] ? do_syscall_64+0x21/0x620 [ 1247.444508] do_syscall_64+0xf9/0x620 [ 1247.448322] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1247.453517] RIP: 0033:0x7f6d69fac0f9 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13000000}, 0x34) [ 1247.457235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1247.476136] RSP: 002b:00007f6d6851e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.483851] RAX: ffffffffffffffda RBX: 00007f6d6a0cbf80 RCX: 00007f6d69fac0f9 [ 1247.491124] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1247.498393] RBP: 00007f6d6851e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.505672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14000000}, 0x34) 17:37:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000001280), 0x0, 0x467b8fc26284b0fd) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="64b00bbd7d13c5a3cf2bd7f37a221cf49d7899f8ce44804a0b382266dda3fae86dfe5f9d4314ace35f29c3f8d88f3eb2863871dd87035c9f99361bad45dd428a62bf6a8a1ea0795ba51c36dab1fcf404e9e990e71e493907f370854f45292788971db38b0fd721d7a6dae3c5fdc17205f9a2", &(0x7f0000000100)=""/244, &(0x7f0000000200)="a2cfef92d9986026fb4eb09d01122c269d49e94c1c0a8bfdd22d0a34d96bfa4540714d2328bb2c2b6afc2fbcbbedf6b6b42fdfcbdfaab8950456013dbbca474216cc718bb7a469f59330c2a8032b3afeb3dc982681cac1e8682ef2d944ea79508f6d2691d297c6e0bcbd3203", &(0x7f0000000280)="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", 0x0, r1, 0x4}, 0x38) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000740)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x140b, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000be0400", @ANYRES16=0x0, @ANYBLOB="517623ec0266856fffff0300", @ANYRES32=0x0, @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x50) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x18000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r6) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x214100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r8, &(0x7f0000000280)="83cc94130c8832e4ccd3e5bd03c43ed1f607b28513ee9bd113525d43dfe3cebf6835911bd2fbdaf3f0072382df58059b612b913a30cef0afb87e30fe49a200c3554cad56d9baa9bb87ad0b9b4f0077e92a2539abdee429f4ad78e2a95e3da62d99ac2ffc0bd51b998d8c3662431bd6d1d7a9ef3f485f3a756c230077928ef772141a7643dea4aae7459b8e8957f143aa25dcdb4a48fc85be3888bbf309c79ab1a2abb00a0f6da38a6df654f267dcd8664b2d652c6688e1eeb4e181", &(0x7f0000000480)=""/227}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x48001) 17:37:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 2) 17:37:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400010000"], 0x2c}}, 0x0) [ 1247.513032] R13: 00007ffff559f91f R14: 00007f6d6851e300 R15: 0000000000022000 [ 1247.525549] nbd: must specify an index to disconnect 17:37:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000740)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x140b, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x20040000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000be0400", @ANYRES16=0x0, @ANYBLOB="517623ec0266856fffff0300", @ANYRES32=0x0, @ANYRES16=r5], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x50) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x18000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r6) (async, rerun: 64) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x214100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r8, &(0x7f0000000280)="83cc94130c8832e4ccd3e5bd03c43ed1f607b28513ee9bd113525d43dfe3cebf6835911bd2fbdaf3f0072382df58059b612b913a30cef0afb87e30fe49a200c3554cad56d9baa9bb87ad0b9b4f0077e92a2539abdee429f4ad78e2a95e3da62d99ac2ffc0bd51b998d8c3662431bd6d1d7a9ef3f485f3a756c230077928ef772141a7643dea4aae7459b8e8957f143aa25dcdb4a48fc85be3888bbf309c79ab1a2abb00a0f6da38a6df654f267dcd8664b2d652c6688e1eeb4e181", &(0x7f0000000480)=""/227}, 0x20) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x48001) (rerun: 32) 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x34) [ 1247.604956] nbd: must specify an index to disconnect 17:37:57 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 1) [ 1247.631357] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:37:57 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000001280), 0x0, 0x467b8fc26284b0fd) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="64b00bbd7d13c5a3cf2bd7f37a221cf49d7899f8ce44804a0b382266dda3fae86dfe5f9d4314ace35f29c3f8d88f3eb2863871dd87035c9f99361bad45dd428a62bf6a8a1ea0795ba51c36dab1fcf404e9e990e71e493907f370854f45292788971db38b0fd721d7a6dae3c5fdc17205f9a2", &(0x7f0000000100)=""/244, &(0x7f0000000200)="a2cfef92d9986026fb4eb09d01122c269d49e94c1c0a8bfdd22d0a34d96bfa4540714d2328bb2c2b6afc2fbcbbedf6b6b42fdfcbdfaab8950456013dbbca474216cc718bb7a469f59330c2a8032b3afeb3dc982681cac1e8682ef2d944ea79508f6d2691d297c6e0bcbd3203", &(0x7f0000000280)="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", 0x0, r1, 0x4}, 0x38) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100000000000000}, 0x34) [ 1247.673151] FAULT_INJECTION: forcing a failure. [ 1247.673151] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.708078] FAULT_INJECTION: forcing a failure. [ 1247.708078] name failslab, interval 1, probability 0, space 0, times 0 17:37:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) [ 1247.737921] CPU: 0 PID: 24067 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1247.745826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1247.755294] Call Trace: [ 1247.757889] dump_stack+0x1fc/0x2ef [ 1247.761528] should_fail.cold+0xa/0xf [ 1247.765338] ? setup_fault_attr+0x200/0x200 [ 1247.769667] ? lock_acquire+0x170/0x3c0 [ 1247.773660] __should_failslab+0x115/0x180 [ 1247.777905] should_failslab+0x5/0x10 [ 1247.781715] kmem_cache_alloc_node_trace+0x244/0x3b0 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000000000000}, 0x34) [ 1247.786838] __kmalloc_node_track_caller+0x38/0x70 [ 1247.791775] __alloc_skb+0xae/0x560 [ 1247.795413] netlink_sendmsg+0x9f6/0xc50 [ 1247.799482] ? aa_af_perm+0x230/0x230 [ 1247.803287] ? nlmsg_notify+0x1f0/0x1f0 [ 1247.807264] ? kernel_recvmsg+0x220/0x220 [ 1247.811425] ? nlmsg_notify+0x1f0/0x1f0 [ 1247.815412] sock_sendmsg+0xc3/0x120 [ 1247.819131] ___sys_sendmsg+0x7bb/0x8e0 [ 1247.823114] ? check_preemption_disabled+0x41/0x280 [ 1247.828137] ? copy_msghdr_from_user+0x440/0x440 [ 1247.832900] ? __fget+0x32f/0x510 [ 1247.836370] ? lock_downgrade+0x720/0x720 [ 1247.840527] ? check_preemption_disabled+0x41/0x280 [ 1247.845553] ? check_preemption_disabled+0x41/0x280 [ 1247.850580] ? __fget+0x356/0x510 [ 1247.854040] ? do_dup2+0x450/0x450 [ 1247.857588] ? lock_downgrade+0x720/0x720 [ 1247.861739] ? vfs_write+0x3d7/0x540 [ 1247.865460] ? __fdget+0x1d0/0x230 [ 1247.869030] __x64_sys_sendmsg+0x132/0x220 [ 1247.873274] ? __sys_sendmsg+0x1b0/0x1b0 [ 1247.877342] ? vfs_write+0x393/0x540 [ 1247.881076] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 17:37:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000000000000}, 0x34) [ 1247.886444] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1247.891471] ? do_syscall_64+0x21/0x620 [ 1247.895453] do_syscall_64+0xf9/0x620 [ 1247.899263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1247.904446] RIP: 0033:0x7f6d69fac0f9 [ 1247.908154] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1247.927057] RSP: 002b:00007f6d6851e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.934777] RAX: ffffffffffffffda RBX: 00007f6d6a0cbf80 RCX: 00007f6d69fac0f9 [ 1247.942046] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1247.949322] RBP: 00007f6d6851e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.956601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.963874] R13: 00007ffff559f91f R14: 00007f6d6851e300 R15: 0000000000022000 [ 1247.976935] CPU: 1 PID: 24072 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1247.984835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1247.994190] Call Trace: [ 1247.996784] dump_stack+0x1fc/0x2ef [ 1248.000425] should_fail.cold+0xa/0xf [ 1248.004236] ? setup_fault_attr+0x200/0x200 [ 1248.008554] ? lock_acquire+0x170/0x3c0 [ 1248.012526] __should_failslab+0x115/0x180 [ 1248.016765] should_failslab+0x5/0x10 [ 1248.020570] kmem_cache_alloc_node+0x245/0x3b0 [ 1248.025162] __alloc_skb+0x71/0x560 [ 1248.028793] netlink_sendmsg+0x9f6/0xc50 [ 1248.032865] ? aa_af_perm+0x230/0x230 17:37:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) syz_open_dev$ndb(&(0x7f0000001280), 0x0, 0x467b8fc26284b0fd) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async, rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="64b00bbd7d13c5a3cf2bd7f37a221cf49d7899f8ce44804a0b382266dda3fae86dfe5f9d4314ace35f29c3f8d88f3eb2863871dd87035c9f99361bad45dd428a62bf6a8a1ea0795ba51c36dab1fcf404e9e990e71e493907f370854f45292788971db38b0fd721d7a6dae3c5fdc17205f9a2", &(0x7f0000000100)=""/244, &(0x7f0000000200)="a2cfef92d9986026fb4eb09d01122c269d49e94c1c0a8bfdd22d0a34d96bfa4540714d2328bb2c2b6afc2fbcbbedf6b6b42fdfcbdfaab8950456013dbbca474216cc718bb7a469f59330c2a8032b3afeb3dc982681cac1e8682ef2d944ea79508f6d2691d297c6e0bcbd3203", &(0x7f0000000280)="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", 0x0, r1, 0x4}, 0x38) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1248.036671] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.040649] ? kernel_recvmsg+0x220/0x220 [ 1248.044808] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.048791] sock_sendmsg+0xc3/0x120 [ 1248.052510] ___sys_sendmsg+0x7bb/0x8e0 [ 1248.056493] ? check_preemption_disabled+0x41/0x280 [ 1248.061511] ? copy_msghdr_from_user+0x440/0x440 [ 1248.066275] ? __fget+0x32f/0x510 [ 1248.069741] ? lock_downgrade+0x720/0x720 [ 1248.073892] ? check_preemption_disabled+0x41/0x280 [ 1248.078915] ? check_preemption_disabled+0x41/0x280 [ 1248.083942] ? __fget+0x356/0x510 [ 1248.087403] ? do_dup2+0x450/0x450 [ 1248.090945] ? lock_downgrade+0x720/0x720 [ 1248.095095] ? vfs_write+0x3d7/0x540 [ 1248.098813] ? __fdget+0x1d0/0x230 [ 1248.102368] __x64_sys_sendmsg+0x132/0x220 [ 1248.106610] ? __sys_sendmsg+0x1b0/0x1b0 [ 1248.110674] ? vfs_write+0x393/0x540 [ 1248.114403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1248.119770] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1248.124785] ? do_syscall_64+0x21/0x620 [ 1248.128743] do_syscall_64+0xf9/0x620 [ 1248.132535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1248.137709] RIP: 0033:0x7f14fa09e0f9 [ 1248.141418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1248.160298] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.167994] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1248.175245] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1248.182501] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 17:37:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 3) 17:37:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000000000}, 0x34) 17:37:58 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:58 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 2) 17:37:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) [ 1248.189761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.197025] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 17:37:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500000000000000}, 0x34) 17:37:58 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x0) 17:37:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) [ 1248.307336] FAULT_INJECTION: forcing a failure. [ 1248.307336] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.321061] FAULT_INJECTION: forcing a failure. [ 1248.321061] name failslab, interval 1, probability 0, space 0, times 0 17:37:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1248.373768] CPU: 1 PID: 24112 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1248.381689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1248.391044] Call Trace: [ 1248.393641] dump_stack+0x1fc/0x2ef [ 1248.397289] should_fail.cold+0xa/0xf [ 1248.401120] ? setup_fault_attr+0x200/0x200 [ 1248.405452] ? lock_downgrade+0x720/0x720 [ 1248.409610] ? check_preemption_disabled+0x41/0x280 [ 1248.414641] __should_failslab+0x115/0x180 [ 1248.418884] should_failslab+0x5/0x10 17:37:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x454c025bd329da64}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c2}, 0x0) [ 1248.422687] kmem_cache_alloc+0x3f/0x370 [ 1248.426756] skb_clone+0x151/0x3d0 [ 1248.430311] netlink_deliver_tap+0x955/0xb00 [ 1248.434734] netlink_unicast+0x545/0x690 [ 1248.438806] ? netlink_sendskb+0x110/0x110 [ 1248.443043] ? _copy_from_iter_full+0x229/0x7c0 [ 1248.447722] ? __phys_addr_symbol+0x2c/0x70 [ 1248.452048] ? __check_object_size+0x17b/0x3e0 [ 1248.454262] nbd: must specify an index to disconnect [ 1248.456633] netlink_sendmsg+0x6c3/0xc50 [ 1248.456653] ? aa_af_perm+0x230/0x230 [ 1248.456669] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.473726] ? kernel_recvmsg+0x220/0x220 [ 1248.477889] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.481864] sock_sendmsg+0xc3/0x120 [ 1248.485574] ___sys_sendmsg+0x7bb/0x8e0 [ 1248.489555] ? check_preemption_disabled+0x41/0x280 [ 1248.494574] ? copy_msghdr_from_user+0x440/0x440 [ 1248.499329] ? __fget+0x32f/0x510 [ 1248.502795] ? lock_downgrade+0x720/0x720 [ 1248.506947] ? check_preemption_disabled+0x41/0x280 [ 1248.511981] ? check_preemption_disabled+0x41/0x280 [ 1248.516997] ? __fget+0x356/0x510 [ 1248.520469] ? do_dup2+0x450/0x450 [ 1248.524631] ? lock_downgrade+0x720/0x720 [ 1248.528787] ? vfs_write+0x3d7/0x540 [ 1248.532508] ? __fdget+0x1d0/0x230 [ 1248.536051] __x64_sys_sendmsg+0x132/0x220 [ 1248.540289] ? __sys_sendmsg+0x1b0/0x1b0 [ 1248.544357] ? vfs_write+0x393/0x540 [ 1248.548094] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1248.553455] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1248.558476] ? do_syscall_64+0x21/0x620 [ 1248.562464] do_syscall_64+0xf9/0x620 [ 1248.566269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1248.571462] RIP: 0033:0x7f6d69fac0f9 [ 1248.575172] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1248.594069] RSP: 002b:00007f6d6851e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.601774] RAX: ffffffffffffffda RBX: 00007f6d6a0cbf80 RCX: 00007f6d69fac0f9 [ 1248.609041] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1248.616301] RBP: 00007f6d6851e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.623561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.630817] R13: 00007ffff559f91f R14: 00007f6d6851e300 R15: 0000000000022000 [ 1248.638106] CPU: 0 PID: 24113 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1248.645997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1248.655352] Call Trace: [ 1248.657951] dump_stack+0x1fc/0x2ef [ 1248.661589] should_fail.cold+0xa/0xf [ 1248.665397] ? setup_fault_attr+0x200/0x200 [ 1248.666994] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1248.669720] ? lock_acquire+0x170/0x3c0 [ 1248.669743] __should_failslab+0x115/0x180 [ 1248.669764] should_failslab+0x5/0x10 [ 1248.689092] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1248.694213] __kmalloc_node_track_caller+0x38/0x70 [ 1248.699150] __alloc_skb+0xae/0x560 [ 1248.702786] netlink_sendmsg+0x9f6/0xc50 [ 1248.706853] ? aa_af_perm+0x230/0x230 [ 1248.710659] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.714629] ? kernel_recvmsg+0x220/0x220 [ 1248.718789] ? nlmsg_notify+0x1f0/0x1f0 [ 1248.722767] sock_sendmsg+0xc3/0x120 [ 1248.726481] ___sys_sendmsg+0x7bb/0x8e0 [ 1248.730460] ? check_preemption_disabled+0x41/0x280 [ 1248.735478] ? copy_msghdr_from_user+0x440/0x440 [ 1248.740239] ? __fget+0x32f/0x510 [ 1248.743701] ? lock_downgrade+0x720/0x720 [ 1248.747861] ? check_preemption_disabled+0x41/0x280 [ 1248.752883] ? check_preemption_disabled+0x41/0x280 [ 1248.757904] ? __fget+0x356/0x510 [ 1248.761361] ? do_dup2+0x450/0x450 [ 1248.764903] ? lock_downgrade+0x720/0x720 [ 1248.769057] ? vfs_write+0x3d7/0x540 17:37:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 4) 17:37:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) 17:37:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x454c025bd329da64}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c2}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x454c025bd329da64}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c2}, 0x0) (async) 17:37:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600000000000000}, 0x34) [ 1248.772778] ? __fdget+0x1d0/0x230 [ 1248.776328] __x64_sys_sendmsg+0x132/0x220 [ 1248.780569] ? __sys_sendmsg+0x1b0/0x1b0 [ 1248.784632] ? vfs_write+0x393/0x540 [ 1248.788366] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1248.793736] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1248.798753] ? do_syscall_64+0x21/0x620 [ 1248.802738] do_syscall_64+0xf9/0x620 [ 1248.806548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1248.811740] RIP: 0033:0x7f14fa09e0f9 [ 1248.815457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1248.834357] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.836666] nbd: must specify an index to disconnect [ 1248.843284] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1248.843293] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1248.843302] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 17:37:58 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 3) 17:37:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) 17:37:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x700000000000000}, 0x34) [ 1248.843310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.843319] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 17:37:58 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) [ 1248.916640] FAULT_INJECTION: forcing a failure. [ 1248.916640] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.955649] CPU: 0 PID: 24152 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1248.963561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1248.972916] Call Trace: [ 1248.975510] dump_stack+0x1fc/0x2ef [ 1248.979147] should_fail.cold+0xa/0xf [ 1248.982956] ? setup_fault_attr+0x200/0x200 [ 1248.987285] ? lock_acquire+0x170/0x3c0 [ 1248.991281] __should_failslab+0x115/0x180 [ 1248.995523] should_failslab+0x5/0x10 [ 1248.999329] kmem_cache_alloc_node+0x245/0x3b0 [ 1249.003920] __alloc_skb+0x71/0x560 [ 1249.007557] netlink_ack+0x27d/0xae0 [ 1249.011276] ? __radix_tree_lookup+0x216/0x370 [ 1249.015862] ? netlink_sendmsg+0xc50/0xc50 [ 1249.020108] netlink_rcv_skb+0x353/0x440 [ 1249.024176] ? genl_family_rcv_msg+0xc40/0xc40 [ 1249.028766] ? netlink_ack+0xae0/0xae0 [ 1249.032660] ? genl_rcv+0x15/0x40 [ 1249.036130] genl_rcv+0x24/0x40 [ 1249.039412] netlink_unicast+0x4d5/0x690 [ 1249.043475] ? netlink_sendskb+0x110/0x110 [ 1249.047711] ? _copy_from_iter_full+0x229/0x7c0 [ 1249.052472] ? __phys_addr_symbol+0x2c/0x70 [ 1249.056796] ? __check_object_size+0x17b/0x3e0 [ 1249.061383] netlink_sendmsg+0x6c3/0xc50 17:37:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xcfv+#&]'}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x454c025bd329da64}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c2}, 0x0) [ 1249.065449] ? aa_af_perm+0x230/0x230 [ 1249.069256] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.073228] ? kernel_recvmsg+0x220/0x220 [ 1249.077474] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.081456] sock_sendmsg+0xc3/0x120 [ 1249.085172] ___sys_sendmsg+0x7bb/0x8e0 [ 1249.089153] ? check_preemption_disabled+0x41/0x280 [ 1249.094170] ? copy_msghdr_from_user+0x440/0x440 [ 1249.098929] ? __fget+0x32f/0x510 [ 1249.102392] ? lock_downgrade+0x720/0x720 [ 1249.106499] nbd: must specify an index to disconnect [ 1249.106542] ? check_preemption_disabled+0x41/0x280 17:37:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3f}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1249.116647] ? check_preemption_disabled+0x41/0x280 [ 1249.121673] ? __fget+0x356/0x510 [ 1249.125141] ? do_dup2+0x450/0x450 [ 1249.128683] ? lock_downgrade+0x720/0x720 [ 1249.132839] ? vfs_write+0x3d7/0x540 [ 1249.136566] ? __fdget+0x1d0/0x230 [ 1249.140119] __x64_sys_sendmsg+0x132/0x220 [ 1249.144358] ? __sys_sendmsg+0x1b0/0x1b0 [ 1249.148425] ? vfs_write+0x393/0x540 [ 1249.152157] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1249.157527] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1249.162551] ? do_syscall_64+0x21/0x620 [ 1249.166533] do_syscall_64+0xf9/0x620 [ 1249.170340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.175525] RIP: 0033:0x7f6d69fac0f9 [ 1249.179242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1249.196928] FAULT_INJECTION: forcing a failure. [ 1249.196928] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.198145] RSP: 002b:00007f6d684fd168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 17:37:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000000000000}, 0x34) 17:37:59 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) [ 1249.198161] RAX: ffffffffffffffda RBX: 00007f6d6a0cc050 RCX: 00007f6d69fac0f9 [ 1249.198169] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1249.198176] RBP: 00007f6d684fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1249.198193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.246180] R13: 00007ffff559f91f R14: 00007f6d684fd300 R15: 0000000000022000 [ 1249.272028] CPU: 0 PID: 24155 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1249.279931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1249.289281] Call Trace: [ 1249.291875] dump_stack+0x1fc/0x2ef [ 1249.295514] should_fail.cold+0xa/0xf [ 1249.299330] ? setup_fault_attr+0x200/0x200 [ 1249.303946] ? lock_downgrade+0x720/0x720 [ 1249.308098] ? check_preemption_disabled+0x41/0x280 [ 1249.313128] __should_failslab+0x115/0x180 [ 1249.317376] should_failslab+0x5/0x10 [ 1249.321179] kmem_cache_alloc+0x3f/0x370 [ 1249.325244] skb_clone+0x151/0x3d0 [ 1249.328791] netlink_deliver_tap+0x955/0xb00 [ 1249.333210] netlink_unicast+0x545/0x690 [ 1249.337276] ? netlink_sendskb+0x110/0x110 [ 1249.341519] ? _copy_from_iter_full+0x229/0x7c0 [ 1249.346194] ? __phys_addr_symbol+0x2c/0x70 [ 1249.350526] ? __check_object_size+0x17b/0x3e0 [ 1249.355116] netlink_sendmsg+0x6c3/0xc50 [ 1249.359183] ? aa_af_perm+0x230/0x230 [ 1249.362990] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.366967] ? kernel_recvmsg+0x220/0x220 [ 1249.371126] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.375101] sock_sendmsg+0xc3/0x120 [ 1249.378814] ___sys_sendmsg+0x7bb/0x8e0 [ 1249.382799] ? check_preemption_disabled+0x41/0x280 [ 1249.387816] ? copy_msghdr_from_user+0x440/0x440 [ 1249.392573] ? __fget+0x32f/0x510 [ 1249.396034] ? lock_downgrade+0x720/0x720 [ 1249.400193] ? check_preemption_disabled+0x41/0x280 [ 1249.405225] ? check_preemption_disabled+0x41/0x280 [ 1249.410252] ? __fget+0x356/0x510 [ 1249.413715] ? do_dup2+0x450/0x450 [ 1249.417254] ? lock_downgrade+0x720/0x720 [ 1249.421404] ? vfs_write+0x3d7/0x540 [ 1249.425126] ? __fdget+0x1d0/0x230 [ 1249.428680] __x64_sys_sendmsg+0x132/0x220 [ 1249.432922] ? __sys_sendmsg+0x1b0/0x1b0 [ 1249.436992] ? vfs_write+0x393/0x540 [ 1249.440729] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1249.446101] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1249.451128] ? do_syscall_64+0x21/0x620 [ 1249.455098] do_syscall_64+0xf9/0x620 [ 1249.458911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.464085] RIP: 0033:0x7f14fa09e0f9 [ 1249.467782] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1249.486669] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.494366] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1249.501624] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1249.508883] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 17:37:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 5) 17:37:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a080) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a080) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) (async) 17:37:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3f}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:37:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x900000000000000}, 0x34) 17:37:59 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:37:59 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 4) [ 1249.516154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.523406] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 [ 1249.550634] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:37:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3f}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3f}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffb}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:37:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x34) [ 1249.594983] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1249.622808] FAULT_INJECTION: forcing a failure. [ 1249.622808] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.636795] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:37:59 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:37:59 executing program 2: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/181, &(0x7f0000000100)=0xb5) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x0, 0x54, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) [ 1249.665924] FAULT_INJECTION: forcing a failure. [ 1249.665924] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.697993] CPU: 0 PID: 24200 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1249.705910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1249.715269] Call Trace: [ 1249.717875] dump_stack+0x1fc/0x2ef [ 1249.721517] should_fail.cold+0xa/0xf [ 1249.723694] nla_parse: 9 callbacks suppressed [ 1249.723703] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1249.725345] ? setup_fault_attr+0x200/0x200 [ 1249.725361] ? lock_acquire+0x170/0x3c0 [ 1249.725380] __should_failslab+0x115/0x180 [ 1249.750929] should_failslab+0x5/0x10 [ 1249.754738] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1249.759851] __kmalloc_node_track_caller+0x38/0x70 [ 1249.764795] __alloc_skb+0xae/0x560 [ 1249.768429] netlink_ack+0x27d/0xae0 [ 1249.772153] ? __radix_tree_lookup+0x216/0x370 [ 1249.776743] ? netlink_sendmsg+0xc50/0xc50 [ 1249.781002] netlink_rcv_skb+0x353/0x440 [ 1249.785067] ? genl_family_rcv_msg+0xc40/0xc40 [ 1249.789653] ? netlink_ack+0xae0/0xae0 [ 1249.793545] ? genl_rcv+0x15/0x40 [ 1249.797037] genl_rcv+0x24/0x40 [ 1249.800325] netlink_unicast+0x4d5/0x690 [ 1249.804393] ? netlink_sendskb+0x110/0x110 [ 1249.808629] ? _copy_from_iter_full+0x229/0x7c0 [ 1249.813301] ? __phys_addr_symbol+0x2c/0x70 [ 1249.817625] ? __check_object_size+0x17b/0x3e0 [ 1249.822213] netlink_sendmsg+0x6c3/0xc50 [ 1249.826284] ? aa_af_perm+0x230/0x230 [ 1249.830083] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.834058] ? kernel_recvmsg+0x220/0x220 [ 1249.838211] ? nlmsg_notify+0x1f0/0x1f0 [ 1249.842188] sock_sendmsg+0xc3/0x120 [ 1249.845905] ___sys_sendmsg+0x7bb/0x8e0 [ 1249.849886] ? check_preemption_disabled+0x41/0x280 [ 1249.854907] ? copy_msghdr_from_user+0x440/0x440 [ 1249.859750] ? __fget+0x32f/0x510 [ 1249.863212] ? lock_downgrade+0x720/0x720 [ 1249.867368] ? check_preemption_disabled+0x41/0x280 [ 1249.872387] ? check_preemption_disabled+0x41/0x280 [ 1249.877407] ? __fget+0x356/0x510 [ 1249.880862] ? do_dup2+0x450/0x450 [ 1249.884407] ? lock_downgrade+0x720/0x720 [ 1249.888554] ? vfs_write+0x3d7/0x540 [ 1249.892272] ? __fdget+0x1d0/0x230 [ 1249.895812] __x64_sys_sendmsg+0x132/0x220 [ 1249.900048] ? __sys_sendmsg+0x1b0/0x1b0 [ 1249.904146] ? vfs_write+0x393/0x540 [ 1249.907872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1249.913239] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1249.918252] ? do_syscall_64+0x21/0x620 [ 1249.922224] do_syscall_64+0xf9/0x620 [ 1249.926032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.931217] RIP: 0033:0x7f6d69fac0f9 [ 1249.934929] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1249.953835] RSP: 002b:00007f6d6851e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 17:38:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x34) 17:38:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@alg={0x100, 0x10, 0x100, 0x70bd2a, 0x25dfdbfe, {{'ctr-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x600, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x55c9}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0xa02, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) [ 1249.961549] RAX: ffffffffffffffda RBX: 00007f6d6a0cbf80 RCX: 00007f6d69fac0f9 [ 1249.968825] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1249.976091] RBP: 00007f6d6851e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1249.983356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.990624] R13: 00007ffff559f91f R14: 00007f6d6851e300 R15: 0000000000022000 [ 1249.997914] CPU: 1 PID: 24205 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1250.005799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1250.015148] Call Trace: [ 1250.017744] dump_stack+0x1fc/0x2ef [ 1250.021379] should_fail.cold+0xa/0xf [ 1250.025187] ? setup_fault_attr+0x200/0x200 [ 1250.029519] ? lock_acquire+0x170/0x3c0 [ 1250.033509] __should_failslab+0x115/0x180 [ 1250.037758] should_failslab+0x5/0x10 [ 1250.041566] kmem_cache_alloc_node+0x245/0x3b0 [ 1250.046155] __alloc_skb+0x71/0x560 [ 1250.049782] netlink_ack+0x27d/0xae0 [ 1250.053503] ? __radix_tree_lookup+0x216/0x370 [ 1250.058092] ? netlink_sendmsg+0xc50/0xc50 [ 1250.062335] netlink_rcv_skb+0x353/0x440 [ 1250.066403] ? genl_family_rcv_msg+0xc40/0xc40 [ 1250.071001] ? netlink_ack+0xae0/0xae0 [ 1250.074895] ? genl_rcv+0x15/0x40 [ 1250.078360] genl_rcv+0x24/0x40 [ 1250.081647] netlink_unicast+0x4d5/0x690 [ 1250.085719] ? netlink_sendskb+0x110/0x110 [ 1250.089964] ? _copy_from_iter_full+0x229/0x7c0 [ 1250.094641] ? __phys_addr_symbol+0x2c/0x70 [ 1250.098969] ? __check_object_size+0x17b/0x3e0 [ 1250.103558] netlink_sendmsg+0x6c3/0xc50 [ 1250.107632] ? aa_af_perm+0x230/0x230 [ 1250.111434] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.115411] ? kernel_recvmsg+0x220/0x220 [ 1250.119569] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.123549] sock_sendmsg+0xc3/0x120 [ 1250.127267] ___sys_sendmsg+0x7bb/0x8e0 [ 1250.131251] ? check_preemption_disabled+0x41/0x280 [ 1250.136271] ? copy_msghdr_from_user+0x440/0x440 [ 1250.141027] ? __fget+0x32f/0x510 [ 1250.144476] ? lock_downgrade+0x720/0x720 [ 1250.148609] ? check_preemption_disabled+0x41/0x280 [ 1250.153613] ? check_preemption_disabled+0x41/0x280 [ 1250.158612] ? __fget+0x356/0x510 [ 1250.162048] ? do_dup2+0x450/0x450 [ 1250.165570] ? lock_downgrade+0x720/0x720 [ 1250.169699] ? vfs_write+0x3d7/0x540 [ 1250.173410] ? __fdget+0x1d0/0x230 [ 1250.176937] __x64_sys_sendmsg+0x132/0x220 [ 1250.181157] ? __sys_sendmsg+0x1b0/0x1b0 [ 1250.185197] ? vfs_write+0x393/0x540 [ 1250.188894] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1250.194240] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1250.199259] ? do_syscall_64+0x21/0x620 [ 1250.203227] do_syscall_64+0xf9/0x620 [ 1250.207015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1250.212193] RIP: 0033:0x7f14fa09e0f9 [ 1250.215886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1250.234767] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.242454] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1250.249704] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1250.256961] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 17:38:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 6) 17:38:00 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:00 executing program 2: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/181, &(0x7f0000000100)=0xb5) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x0, 0x54, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/181, &(0x7f0000000100)=0xb5) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x0, 0x54, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) (async) 17:38:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x34) [ 1250.264209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.271457] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 17:38:00 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 5) 17:38:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@alg={0x100, 0x10, 0x100, 0x70bd2a, 0x25dfdbfe, {{'ctr-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x600, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x55c9}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0xa02, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) (async) sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@alg={0x100, 0x10, 0x100, 0x70bd2a, 0x25dfdbfe, {{'ctr-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x600, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x55c9}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1000, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0xa02, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (async) 17:38:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x34) 17:38:00 executing program 2: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/181, &(0x7f0000000100)=0xb5) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/181, &(0x7f0000000100)=0xb5) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x0, 0x54, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) 17:38:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x34) [ 1250.357950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:00 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:00 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x48051) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x6c1b, 0x4) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@alg={0x100, 0x10, 0x100, 0x70bd2a, 0x25dfdbfe, {{'ctr-camellia-aesni-avx2\x00'}, '\x00', '\x00', 0x600, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x55c9}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1000, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0xa02, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (rerun: 64) [ 1250.404331] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1250.422912] FAULT_INJECTION: forcing a failure. [ 1250.422912] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.439442] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1250.460470] FAULT_INJECTION: forcing a failure. [ 1250.460470] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.492986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1250.500492] CPU: 1 PID: 24275 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1250.509460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1250.518806] Call Trace: [ 1250.521391] dump_stack+0x1fc/0x2ef [ 1250.525022] should_fail.cold+0xa/0xf [ 1250.528832] ? setup_fault_attr+0x200/0x200 [ 1250.533147] ? lock_acquire+0x170/0x3c0 [ 1250.537122] __should_failslab+0x115/0x180 [ 1250.541368] should_failslab+0x5/0x10 [ 1250.545168] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1250.550269] __kmalloc_node_track_caller+0x38/0x70 [ 1250.555191] __alloc_skb+0xae/0x560 [ 1250.558814] netlink_ack+0x27d/0xae0 [ 1250.562526] ? __radix_tree_lookup+0x216/0x370 [ 1250.567099] ? netlink_sendmsg+0xc50/0xc50 [ 1250.571329] netlink_rcv_skb+0x353/0x440 [ 1250.575383] ? genl_family_rcv_msg+0xc40/0xc40 [ 1250.579965] ? netlink_ack+0xae0/0xae0 [ 1250.583852] ? genl_rcv+0x15/0x40 [ 1250.587300] genl_rcv+0x24/0x40 [ 1250.590567] netlink_unicast+0x4d5/0x690 [ 1250.594618] ? netlink_sendskb+0x110/0x110 [ 1250.598842] ? _copy_from_iter_full+0x229/0x7c0 [ 1250.603505] ? __phys_addr_symbol+0x2c/0x70 [ 1250.609390] ? __check_object_size+0x17b/0x3e0 [ 1250.613963] netlink_sendmsg+0x6c3/0xc50 [ 1250.618020] ? aa_af_perm+0x230/0x230 [ 1250.621811] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.625771] ? kernel_recvmsg+0x220/0x220 [ 1250.629913] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.633877] sock_sendmsg+0xc3/0x120 [ 1250.637579] ___sys_sendmsg+0x7bb/0x8e0 [ 1250.641549] ? check_preemption_disabled+0x41/0x280 [ 1250.646560] ? copy_msghdr_from_user+0x440/0x440 [ 1250.651311] ? __fget+0x32f/0x510 [ 1250.654844] ? lock_downgrade+0x720/0x720 [ 1250.658984] ? check_preemption_disabled+0x41/0x280 [ 1250.663999] ? check_preemption_disabled+0x41/0x280 [ 1250.669014] ? __fget+0x356/0x510 [ 1250.672458] ? do_dup2+0x450/0x450 [ 1250.675991] ? lock_downgrade+0x720/0x720 [ 1250.680130] ? vfs_write+0x3d7/0x540 [ 1250.683834] ? __fdget+0x1d0/0x230 [ 1250.687368] __x64_sys_sendmsg+0x132/0x220 [ 1250.691677] ? __sys_sendmsg+0x1b0/0x1b0 [ 1250.695734] ? vfs_write+0x393/0x540 [ 1250.699451] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1250.704804] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1250.709810] ? do_syscall_64+0x21/0x620 [ 1250.713777] do_syscall_64+0xf9/0x620 [ 1250.717573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1250.722752] RIP: 0033:0x7f14fa09e0f9 [ 1250.726458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1250.745437] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.753144] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1250.760402] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1250.767666] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.774930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.782196] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 [ 1250.789483] CPU: 0 PID: 24271 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1250.797371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1250.806722] Call Trace: [ 1250.809316] dump_stack+0x1fc/0x2ef [ 1250.812961] should_fail.cold+0xa/0xf [ 1250.816773] ? setup_fault_attr+0x200/0x200 [ 1250.821101] ? sk_filter_trim_cap+0x497/0x7d0 [ 1250.825613] __should_failslab+0x115/0x180 [ 1250.829858] should_failslab+0x5/0x10 [ 1250.834062] kmem_cache_alloc+0x3f/0x370 [ 1250.838862] skb_clone+0x151/0x3d0 [ 1250.842416] netlink_deliver_tap+0x955/0xb00 [ 1250.846841] netlink_sendskb+0x6c/0x110 [ 1250.850820] netlink_unicast+0x5b3/0x690 [ 1250.854889] ? netlink_sendskb+0x110/0x110 [ 1250.859128] ? memset+0x20/0x40 [ 1250.862412] ? __nlmsg_put+0x155/0x1c0 [ 1250.866310] netlink_ack+0x628/0xae0 [ 1250.870035] ? netlink_sendmsg+0xc50/0xc50 [ 1250.874284] netlink_rcv_skb+0x353/0x440 [ 1250.878350] ? genl_family_rcv_msg+0xc40/0xc40 [ 1250.882939] ? netlink_ack+0xae0/0xae0 [ 1250.886843] ? genl_rcv+0x15/0x40 [ 1250.890304] genl_rcv+0x24/0x40 [ 1250.893585] netlink_unicast+0x4d5/0x690 [ 1250.897651] ? netlink_sendskb+0x110/0x110 [ 1250.901890] ? _copy_from_iter_full+0x229/0x7c0 [ 1250.906560] ? __phys_addr_symbol+0x2c/0x70 [ 1250.910872] ? __check_object_size+0x17b/0x3e0 [ 1250.915436] netlink_sendmsg+0x6c3/0xc50 [ 1250.919481] ? aa_af_perm+0x230/0x230 [ 1250.923265] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.927216] ? kernel_recvmsg+0x220/0x220 [ 1250.931372] ? nlmsg_notify+0x1f0/0x1f0 [ 1250.935328] sock_sendmsg+0xc3/0x120 [ 1250.939019] ___sys_sendmsg+0x7bb/0x8e0 [ 1250.942978] ? check_preemption_disabled+0x41/0x280 [ 1250.947974] ? copy_msghdr_from_user+0x440/0x440 [ 1250.952709] ? __fget+0x32f/0x510 [ 1250.956144] ? lock_downgrade+0x720/0x720 [ 1250.960275] ? check_preemption_disabled+0x41/0x280 [ 1250.965273] ? check_preemption_disabled+0x41/0x280 [ 1250.970280] ? __fget+0x356/0x510 [ 1250.973719] ? do_dup2+0x450/0x450 [ 1250.977252] ? lock_downgrade+0x720/0x720 [ 1250.981393] ? vfs_write+0x3d7/0x540 [ 1250.985087] ? __fdget+0x1d0/0x230 [ 1250.988608] __x64_sys_sendmsg+0x132/0x220 [ 1250.992833] ? __sys_sendmsg+0x1b0/0x1b0 [ 1250.996882] ? vfs_write+0x393/0x540 [ 1251.000581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1251.005926] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1251.010941] ? do_syscall_64+0x21/0x620 [ 1251.014910] do_syscall_64+0xf9/0x620 [ 1251.020079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1251.025269] RIP: 0033:0x7f6d69fac0f9 [ 1251.028967] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1251.047856] RSP: 002b:00007f6d6851e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.055590] RAX: ffffffffffffffda RBX: 00007f6d6a0cbf80 RCX: 00007f6d69fac0f9 17:38:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 7) 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x34) 17:38:01 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x48051) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x6c1b, 0x4) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:01 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) 17:38:01 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 6) [ 1251.062857] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1251.070116] RBP: 00007f6d6851e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.077370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.084628] R13: 00007ffff559f91f R14: 00007f6d6851e300 R15: 0000000000022000 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) [ 1251.181439] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x34) 17:38:01 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x48051) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x6c1b, 0x4) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:01 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) [ 1251.223063] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1251.238440] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1251.238462] FAULT_INJECTION: forcing a failure. [ 1251.238462] name failslab, interval 1, probability 0, space 0, times 0 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x34) [ 1251.295233] CPU: 1 PID: 24316 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1251.303137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1251.312492] Call Trace: [ 1251.315090] dump_stack+0x1fc/0x2ef [ 1251.318730] should_fail.cold+0xa/0xf [ 1251.322538] ? setup_fault_attr+0x200/0x200 [ 1251.326866] ? sk_filter_trim_cap+0x497/0x7d0 [ 1251.331374] __should_failslab+0x115/0x180 [ 1251.333993] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1251.335662] should_failslab+0x5/0x10 [ 1251.335714] kmem_cache_alloc+0x3f/0x370 [ 1251.335758] skb_clone+0x151/0x3d0 [ 1251.335783] netlink_deliver_tap+0x955/0xb00 [ 1251.335835] netlink_sendskb+0x6c/0x110 [ 1251.362942] netlink_unicast+0x5b3/0x690 [ 1251.367018] ? netlink_sendskb+0x110/0x110 [ 1251.371260] ? memset+0x20/0x40 [ 1251.374560] ? __nlmsg_put+0x155/0x1c0 [ 1251.378498] netlink_ack+0x628/0xae0 [ 1251.382242] ? netlink_sendmsg+0xc50/0xc50 [ 1251.386485] netlink_rcv_skb+0x353/0x440 [ 1251.390551] ? genl_family_rcv_msg+0xc40/0xc40 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200000000000000}, 0x34) [ 1251.395138] ? netlink_ack+0xae0/0xae0 [ 1251.399036] ? genl_rcv+0x15/0x40 [ 1251.402503] genl_rcv+0x24/0x40 [ 1251.405782] netlink_unicast+0x4d5/0x690 [ 1251.409860] ? netlink_sendskb+0x110/0x110 [ 1251.414105] ? _copy_from_iter_full+0x229/0x7c0 [ 1251.418782] ? __phys_addr_symbol+0x2c/0x70 [ 1251.423111] ? __check_object_size+0x17b/0x3e0 [ 1251.427702] netlink_sendmsg+0x6c3/0xc50 [ 1251.431781] ? aa_af_perm+0x230/0x230 [ 1251.435587] ? nlmsg_notify+0x1f0/0x1f0 [ 1251.439565] ? kernel_recvmsg+0x220/0x220 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x34) 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400000000000000}, 0x34) [ 1251.443725] ? nlmsg_notify+0x1f0/0x1f0 [ 1251.447709] sock_sendmsg+0xc3/0x120 [ 1251.451431] ___sys_sendmsg+0x7bb/0x8e0 [ 1251.455418] ? check_preemption_disabled+0x41/0x280 [ 1251.460436] ? copy_msghdr_from_user+0x440/0x440 [ 1251.465203] ? __fget+0x32f/0x510 [ 1251.468726] ? lock_downgrade+0x720/0x720 [ 1251.472883] ? check_preemption_disabled+0x41/0x280 [ 1251.477911] ? check_preemption_disabled+0x41/0x280 [ 1251.482931] ? __fget+0x356/0x510 [ 1251.486392] ? do_dup2+0x450/0x450 [ 1251.489938] ? lock_downgrade+0x720/0x720 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800000000000000}, 0x34) [ 1251.494094] ? vfs_write+0x3d7/0x540 [ 1251.497818] ? __fdget+0x1d0/0x230 [ 1251.501374] __x64_sys_sendmsg+0x132/0x220 [ 1251.505611] ? __sys_sendmsg+0x1b0/0x1b0 [ 1251.506177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1251.509679] ? vfs_write+0x393/0x540 [ 1251.509708] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1251.509725] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1251.509742] ? do_syscall_64+0x21/0x620 [ 1251.536395] do_syscall_64+0xf9/0x620 [ 1251.540204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1251.545487] RIP: 0033:0x7f14fa09e0f9 [ 1251.549374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1251.568281] RSP: 002b:00007f14f8610168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.576001] RAX: ffffffffffffffda RBX: 00007f14fa1bdf80 RCX: 00007f14fa09e0f9 [ 1251.584056] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 17:38:01 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) (fail_nth: 7) 17:38:01 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x48) 17:38:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20c601) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1251.591324] RBP: 00007f14f86101d0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.598599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.605878] R13: 00007ffe343fafef R14: 00007f14f8610300 R15: 0000000000022000 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x450081) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x200004f4) 17:38:01 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20c601) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20c601) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x22, 0x6, r1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x2, 0xc02, 0xffffffffffffffff, 0xc32e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 1251.705553] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x450081) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20c601) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20c601) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:01 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:01 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) [ 1251.748830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1251.771445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x450081) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1251.806142] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:01 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x22, 0x6, r1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x2, 0xc02, 0xffffffffffffffff, 0xc32e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 1251.847306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1251.881990] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:01 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:38:01 executing program 0: write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) 17:38:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1251.903177] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x22, 0x6, r1}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x0, 0x0, 0x2, 0xc02, 0xffffffffffffffff, 0xc32e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 17:38:02 executing program 0: write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) (rerun: 32) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1251.960593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1251.993798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xb, &(0x7f00000002c0), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x4, 0x2, 0x2, r1, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x5}, 0x48) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:02 executing program 0: write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) 17:38:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xb, &(0x7f00000002c0), 0x4) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x4, 0x2, 0x2, r1, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x5}, 0x48) [ 1252.097157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x586, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c800}, 0x10) 17:38:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0xb, &(0x7f00000002c0), 0x4) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x4, 0x2, 0x2, r1, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x5}, 0x48) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x586, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c800}, 0x10) 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) (async) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x100, 0x1f, 0x68cd, 0x3, 0x1, 0xffd, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3}, 0x48) [ 1252.271046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x586, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c800}, 0x10) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x100, 0x1f, 0x68cd, 0x3, 0x1, 0xffd, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3}, 0x48) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x2, 0x3, 0x6, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='GPL\x00', 0x3ff, 0x4a, &(0x7f0000000100)=""/74, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1]}, 0x80) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4101080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x2, 0x3, 0x6, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='GPL\x00', 0x3ff, 0x4a, &(0x7f0000000100)=""/74, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1]}, 0x80) 17:38:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x100, 0x1f, 0x68cd, 0x3, 0x1, 0xffd, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x3}, 0x48) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4101080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x2, 0x3, 0x6, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='GPL\x00', 0x3ff, 0x4a, &(0x7f0000000100)=""/74, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1]}, 0x80) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x48) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4101080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 17:38:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5421, 0xffffffffffffffff) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x48) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="b2cb1694d14edada4b79b68f6400cb40c27861c34f06e8e34dde6bb0120fda2459674210f61055c87e0c033f95a19019687ec700b61fa196d562746628db", &(0x7f00000001c0)=""/148, &(0x7f0000000e80)="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", &(0x7f0000000280)="6b104c338f803095a4334a7077bebe9daa6c56a428fa75e1c9bf1967642a22be895509a7d78be8d8b9644f6cd8865b12dfb7e993a7fab1b401649645efe399f90094b4c681bd831dfdda43f40795ec6fdb1f50708ceb24026b6d878e5b78e28fa4a5acbdc33e477aede18049d212ce826162bd4b662e520de0a590ccecf206dd7af56dd2cf2b2254089ff3903e02f0a9e3dcf1a9d4b225b00b59b3ee36deede9bcaa18919ae30c5f9e12492d6cc2f32d96c6a313c57bbc60", 0x101, 0x1, 0x4}, 0x38) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r2, r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x69560c56e7b4374a, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40005) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x48) 17:38:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5421, 0xffffffffffffffff) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="b2cb1694d14edada4b79b68f6400cb40c27861c34f06e8e34dde6bb0120fda2459674210f61055c87e0c033f95a19019687ec700b61fa196d562746628db", &(0x7f00000001c0)=""/148, &(0x7f0000000e80)="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", &(0x7f0000000280)="6b104c338f803095a4334a7077bebe9daa6c56a428fa75e1c9bf1967642a22be895509a7d78be8d8b9644f6cd8865b12dfb7e993a7fab1b401649645efe399f90094b4c681bd831dfdda43f40795ec6fdb1f50708ceb24026b6d878e5b78e28fa4a5acbdc33e477aede18049d212ce826162bd4b662e520de0a590ccecf206dd7af56dd2cf2b2254089ff3903e02f0a9e3dcf1a9d4b225b00b59b3ee36deede9bcaa18919ae30c5f9e12492d6cc2f32d96c6a313c57bbc60", 0x101, 0x1, 0x4}, 0x38) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r2, r1}) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x1ff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x69560c56e7b4374a, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40005) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c16413df928a31149bc3eab000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf251400000008000200150e0000080002000900000008001400a80e0000080007000400000008001400ffffff7f"], 0x3c}, 0x1, 0x0, 0x0, 0x24050051}, 0x0) 17:38:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5421, 0xffffffffffffffff) 17:38:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="b2cb1694d14edada4b79b68f6400cb40c27861c34f06e8e34dde6bb0120fda2459674210f61055c87e0c033f95a19019687ec700b61fa196d562746628db", &(0x7f00000001c0)=""/148, &(0x7f0000000e80)="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", &(0x7f0000000280)="6b104c338f803095a4334a7077bebe9daa6c56a428fa75e1c9bf1967642a22be895509a7d78be8d8b9644f6cd8865b12dfb7e993a7fab1b401649645efe399f90094b4c681bd831dfdda43f40795ec6fdb1f50708ceb24026b6d878e5b78e28fa4a5acbdc33e477aede18049d212ce826162bd4b662e520de0a590ccecf206dd7af56dd2cf2b2254089ff3903e02f0a9e3dcf1a9d4b225b00b59b3ee36deede9bcaa18919ae30c5f9e12492d6cc2f32d96c6a313c57bbc60", 0x101, 0x1, 0x4}, 0x38) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r2, r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x69560c56e7b4374a, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40005) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="b2cb1694d14edada4b79b68f6400cb40c27861c34f06e8e34dde6bb0120fda2459674210f61055c87e0c033f95a19019687ec700b61fa196d562746628db", &(0x7f00000001c0)=""/148, &(0x7f0000000e80)="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", &(0x7f0000000280)="6b104c338f803095a4334a7077bebe9daa6c56a428fa75e1c9bf1967642a22be895509a7d78be8d8b9644f6cd8865b12dfb7e993a7fab1b401649645efe399f90094b4c681bd831dfdda43f40795ec6fdb1f50708ceb24026b6d878e5b78e28fa4a5acbdc33e477aede18049d212ce826162bd4b662e520de0a590ccecf206dd7af56dd2cf2b2254089ff3903e02f0a9e3dcf1a9d4b225b00b59b3ee36deede9bcaa18919ae30c5f9e12492d6cc2f32d96c6a313c57bbc60", 0x101, 0x1, 0x4}, 0x38) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r2, r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mkdirat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x1ff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x69560c56e7b4374a, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40005) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r3}, 0xc) (async) 17:38:02 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c16413df928a31149bc3eab000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf251400000008000200150e0000080002000900000008001400a80e0000080007000400000008001400ffffff7f"], 0x3c}, 0x1, 0x0, 0x0, 0x24050051}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c16413df928a31149bc3eab000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf251400000008000200150e0000080002000900000008001400a80e0000080007000400000008001400ffffff7f"], 0x3c}, 0x1, 0x0, 0x0, 0x24050051}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x222a00) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 17:38:03 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair(0x22, 0xa, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0xc8) sysfs$2(0x2, 0x195, &(0x7f0000000200)=""/159) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r4, 0x5421, 0xffffffffffffffff) 17:38:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c16413df928a31149bc3eab000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf251400000008000200150e0000080002000900000008001400a80e0000080007000400000008001400ffffff7f"], 0x3c}, 0x1, 0x0, 0x0, 0x24050051}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c16413df928a31149bc3eab000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf251400000008000200150e0000080002000900000008001400a80e0000080007000400000008001400ffffff7f"], 0x3c}, 0x1, 0x0, 0x0, 0x24050051}, 0x0) (async) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair(0x22, 0xa, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0xc8) (async) sysfs$2(0x2, 0x195, &(0x7f0000000200)=""/159) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(r4, 0x5421, 0xffffffffffffffff) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x222a00) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x222a00) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x1, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x222a00) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) socketpair(0x22, 0xa, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0xc8) (async) sysfs$2(0x2, 0x195, &(0x7f0000000200)=""/159) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async, rerun: 64) ioctl$NBD_SET_SOCK(r4, 0x5421, 0xffffffffffffffff) (rerun: 64) 17:38:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x1, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="16e70e80e8b6c419a902626b4b97498a", 0x10) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101240) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x2a, 0x3, 0xf0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25030000000c00050012010000000000000c00030006000000000000000c00050004000000000000000c00060001000000000000000c000800fcffffffffffffff0c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) 17:38:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x1, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="16e70e80e8b6c419a902626b4b97498a", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="16e70e80e8b6c419a902626b4b97498a", 0x10) 17:38:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101240) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x2a, 0x3, 0xf0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25030000000c00050012010000000000000c00030006000000000000000c00050004000000000000000c00060001000000000000000c000800fcffffffffffffff0c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101240) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair(0x2a, 0x3, 0xf0, &(0x7f0000000100)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25030000000c00050012010000000000000c00030006000000000000000c00050004000000000000000c00060001000000000000000c000800fcffffffffffffff0c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 17:38:03 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="16e70e80e8b6c419a902626b4b97498a", 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="16e70e80e8b6c419a902626b4b97498a", 0x10) (async) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x6c00, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="b6d53ad17d5c093d23195695fcca06af9180172fc103ea4a104effa0ff56e879258fb7d6dea626", &(0x7f0000000040)=@tcp6=r2, 0x2}, 0x20) 17:38:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101240) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x2a, 0x3, 0xf0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25030000000c00050012010000000000000c00030006000000000000000c00050004000000000000000c00060001000000000000000c000800fcffffffffffffff0c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x101240) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair(0x2a, 0x3, 0xf0, &(0x7f0000000100)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf25030000000c00050012010000000000000c00030006000000000000000c00050004000000000000000c00060001000000000000000c000800fcffffffffffffff0c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) 17:38:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x2, 0x2, 0x7, 0x10000}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @generic={0x3f, 0xe, 0xb, 0x5, 0xffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x3, 0x335, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x80) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x6c00, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="b6d53ad17d5c093d23195695fcca06af9180172fc103ea4a104effa0ff56e879258fb7d6dea626", &(0x7f0000000040)=@tcp6=r2, 0x2}, 0x20) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x2, 0x2, 0x7, 0x10000}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @generic={0x3f, 0xe, 0xb, 0x5, 0xffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x3, 0x335, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x80) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x6c00, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="b6d53ad17d5c093d23195695fcca06af9180172fc103ea4a104effa0ff56e879258fb7d6dea626", &(0x7f0000000040)=@tcp6=r2, 0x2}, 0x20) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x181) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x2, 0x2, 0x7, 0x10000}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @generic={0x3f, 0xe, 0xb, 0x5, 0xffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x3, 0x335, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x80) 17:38:03 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x220903, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x53}], 0x5) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, r4) socket$inet6(0xa, 0x2, 0x8) 17:38:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x181) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x8, 0x2, 0x600}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x3, 0x0, 0x4, 0xa, 0x30}, @jmp={0x5, 0x0, 0xc, 0x5, 0x8, 0x1, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xb, 0x9, 0xa, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x1, &(0x7f00000003c0)=""/1, 0x40f00, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r5, r6]}, 0x80) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0x5, 0xb, 0x4, 0x80}, @exit, @alu={0x4, 0x1, 0xa, 0x7, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @generic={0xde, 0x7, 0x9, 0x7, 0x100}, @alu={0x4, 0x1, 0x7, 0x1, 0x4, 0xfffffffffffffffe, 0xffffffffffffffed}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc41}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0xe90a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2487acef, 0x4}, 0x10, 0x2687a, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r1, r2, r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, r7, 0x24}, 0x10) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x181) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x8, 0x2, 0x600}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x3, 0x0, 0x4, 0xa, 0x30}, @jmp={0x5, 0x0, 0xc, 0x5, 0x8, 0x1, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xb, 0x9, 0xa, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x1, &(0x7f00000003c0)=""/1, 0x40f00, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r5, r6]}, 0x80) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0x5, 0xb, 0x4, 0x80}, @exit, @alu={0x4, 0x1, 0xa, 0x7, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @generic={0xde, 0x7, 0x9, 0x7, 0x100}, @alu={0x4, 0x1, 0x7, 0x1, 0x4, 0xfffffffffffffffe, 0xffffffffffffffed}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc41}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0xe90a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2487acef, 0x4}, 0x10, 0x2687a, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r1, r2, r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, r7, 0x24}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x8, 0x2, 0x600}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x3, 0x0, 0x4, 0xa, 0x30}, @jmp={0x5, 0x0, 0xc, 0x5, 0x8, 0x1, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xb, 0x9, 0xa, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x1, &(0x7f00000003c0)=""/1, 0x40f00, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r5, r6]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0x5, 0xb, 0x4, 0x80}, @exit, @alu={0x4, 0x1, 0xa, 0x7, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @generic={0xde, 0x7, 0x9, 0x7, 0x100}, @alu={0x4, 0x1, 0x7, 0x1, 0x4, 0xfffffffffffffffe, 0xffffffffffffffed}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc41}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0xe90a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2487acef, 0x4}, 0x10, 0x2687a, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r1, r2, r0]}, 0x80) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, r7, 0x24}, 0x10) (async) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@exit, @alu={0x4, 0x0, 0xc, 0x5, 0xa, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x101, 0x1e, &(0x7f0000000200)=""/30, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x0, 0x1000}, 0x10}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x4, 0x10001, 0x1000, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x81, 0x38, &(0x7f0000000540)=""/56, 0x41000, 0x10, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xee, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r3, r7]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x4, 0x5, 0x20, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000040)='GPL\x00', 0x4, 0x3c, &(0x7f0000000080)=""/60, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0x0, 0xacdf}, 0x10, 0x2f25c, r2, 0x0, &(0x7f00000003c0)=[r3]}, 0x80) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x220903, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x53}], 0x5) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, r4) (async) socket$inet6(0xa, 0x2, 0x8) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5b97, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x8, 0x2, 0x600}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x50000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x3, 0x0, 0x4, 0xa, 0x30}, @jmp={0x5, 0x0, 0xc, 0x5, 0x8, 0x1, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0xb, 0x9, 0xa, 0xffffffffffffffff}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x1, &(0x7f00000003c0)=""/1, 0x40f00, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r4, r5, r6]}, 0x80) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x0, 0x5, 0xb, 0x4, 0x80}, @exit, @alu={0x4, 0x1, 0xa, 0x7, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @generic={0xde, 0x7, 0x9, 0x7, 0x100}, @alu={0x4, 0x1, 0x7, 0x1, 0x4, 0xfffffffffffffffe, 0xffffffffffffffed}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc41}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0xe90a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x2487acef, 0x4}, 0x10, 0x2687a, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r1, r2, r0]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, r7, 0x24}, 0x10) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x480c1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:04 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@exit, @alu={0x4, 0x0, 0xc, 0x5, 0xa, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x101, 0x1e, &(0x7f0000000200)=""/30, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x0, 0x1000}, 0x10}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x4, 0x10001, 0x1000, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x4, 0x10001, 0x1000, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x81, 0x38, &(0x7f0000000540)=""/56, 0x41000, 0x10, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xee, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r3, r7]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x81, 0x38, &(0x7f0000000540)=""/56, 0x41000, 0x10, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xee, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r3, r7]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x4, 0x5, 0x20, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000040)='GPL\x00', 0x4, 0x3c, &(0x7f0000000080)=""/60, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0x0, 0xacdf}, 0x10, 0x2f25c, r2, 0x0, &(0x7f00000003c0)=[r3]}, 0x80) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5c94, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x480c1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x480c1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) 17:38:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@exit, @alu={0x4, 0x0, 0xc, 0x5, 0xa, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x101, 0x1e, &(0x7f0000000200)=""/30, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc, 0x0, 0x1000}, 0x10}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x4, 0x10001, 0x1000, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x81, 0x38, &(0x7f0000000540)=""/56, 0x41000, 0x10, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xee, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, r3, r7]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x4, 0x5, 0x20, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}], &(0x7f0000000040)='GPL\x00', 0x4, 0x3c, &(0x7f0000000080)=""/60, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0x0, 0xacdf}, 0x10, 0x2f25c, r2, 0x0, &(0x7f00000003c0)=[r3]}, 0x80) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x220903, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x53}], 0x5) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, r4) socket$inet6(0xa, 0x2, 0x8) (async) socket$inet6(0xa, 0x2, 0x8) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x480c1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:04 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x179941) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x240000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x100000, 0x2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8cd128416864b988, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x179941) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x240000) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x100000, 0x2}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8cd128416864b988, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) (async) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x179941) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x179941) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x240000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) 17:38:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60500) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x975b, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:04 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0x5452, r3) 17:38:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x100000, 0x2}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8cd128416864b988, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x100000, 0x2}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8cd128416864b988, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="d7bef2fde18913f12637f705584fc4b84fe7e817248a2f11bda6c7fe8e898f79244573bcea966b8c0ecd54342cfc8704c401d3c92bdbecfbc7cc53e7481d91fff5d65998eb762c4aa0e812410e6d18d9a4b4c3d0839cf1c5", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="e0f1277a16ee1708486465f34c23dd57ffc45499dcefce1dfaea117803249de0964269297a4fe10374b16e658e68e0e04ba7d24ff448af6d9433177f9c794a29f1665ecee846db0fb24e72b42ea750902c2be5101289773c3f97858ea2fefe0b4530eaffd4ef2eff6b6f5f47a386568fdbb89b0c56787c34f775e2c9395f82d177968072f91be4581cfd999f83a19e4b8a377abd0edcf8441658986c127c430feb5de8fb95", &(0x7f00000011c0)="05c6395aaa60ec024b47b8bba4a498e0606f67231807d1f1c92d905ffa23440970b4d53d090d5dc5943038b83c1e109a71a7ccd89529db503f8a3629971749e4c5c1d1a3f8aa0e3327e262e9baae2c3af19975dfafe6bce52a5184e324ecf80312d0a812f9b13c5ad98680ee1d131face243f0d5878e120fdbda12f6fb03154c316fd5821de641db83b813ec10e62c3f9e7939ef30b3a0cefd808564fa9ba7ce9a4050ec795f68524dc3cc4638f4708d8f3d9e321cd1a91357acdfabecc645219239517df3dea50dbb25d104aea90b52c454a7ff2dbc", 0x101, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001340)={0x40}, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000012c0)={0x5, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={r1, 0x39, 0x8}, 0xc) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60500) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x945c, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x975b, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x975b, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x60500) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="d7bef2fde18913f12637f705584fc4b84fe7e817248a2f11bda6c7fe8e898f79244573bcea966b8c0ecd54342cfc8704c401d3c92bdbecfbc7cc53e7481d91fff5d65998eb762c4aa0e812410e6d18d9a4b4c3d0839cf1c5", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="e0f1277a16ee1708486465f34c23dd57ffc45499dcefce1dfaea117803249de0964269297a4fe10374b16e658e68e0e04ba7d24ff448af6d9433177f9c794a29f1665ecee846db0fb24e72b42ea750902c2be5101289773c3f97858ea2fefe0b4530eaffd4ef2eff6b6f5f47a386568fdbb89b0c56787c34f775e2c9395f82d177968072f91be4581cfd999f83a19e4b8a377abd0edcf8441658986c127c430feb5de8fb95", &(0x7f00000011c0)="05c6395aaa60ec024b47b8bba4a498e0606f67231807d1f1c92d905ffa23440970b4d53d090d5dc5943038b83c1e109a71a7ccd89529db503f8a3629971749e4c5c1d1a3f8aa0e3327e262e9baae2c3af19975dfafe6bce52a5184e324ecf80312d0a812f9b13c5ad98680ee1d131face243f0d5878e120fdbda12f6fb03154c316fd5821de641db83b813ec10e62c3f9e7939ef30b3a0cefd808564fa9ba7ce9a4050ec795f68524dc3cc4638f4708d8f3d9e321cd1a91357acdfabecc645219239517df3dea50dbb25d104aea90b52c454a7ff2dbc", 0x101, 0xffffffffffffffff, 0x4}, 0x38) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001340)={0x40}, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000012c0)={0x5, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={r1, 0x39, 0x8}, 0xc) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x586, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c800}, 0x10) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x45ec41) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="d7bef2fde18913f12637f705584fc4b84fe7e817248a2f11bda6c7fe8e898f79244573bcea966b8c0ecd54342cfc8704c401d3c92bdbecfbc7cc53e7481d91fff5d65998eb762c4aa0e812410e6d18d9a4b4c3d0839cf1c5", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="e0f1277a16ee1708486465f34c23dd57ffc45499dcefce1dfaea117803249de0964269297a4fe10374b16e658e68e0e04ba7d24ff448af6d9433177f9c794a29f1665ecee846db0fb24e72b42ea750902c2be5101289773c3f97858ea2fefe0b4530eaffd4ef2eff6b6f5f47a386568fdbb89b0c56787c34f775e2c9395f82d177968072f91be4581cfd999f83a19e4b8a377abd0edcf8441658986c127c430feb5de8fb95", &(0x7f00000011c0)="05c6395aaa60ec024b47b8bba4a498e0606f67231807d1f1c92d905ffa23440970b4d53d090d5dc5943038b83c1e109a71a7ccd89529db503f8a3629971749e4c5c1d1a3f8aa0e3327e262e9baae2c3af19975dfafe6bce52a5184e324ecf80312d0a812f9b13c5ad98680ee1d131face243f0d5878e120fdbda12f6fb03154c316fd5821de641db83b813ec10e62c3f9e7939ef30b3a0cefd808564fa9ba7ce9a4050ec795f68524dc3cc4638f4708d8f3d9e321cd1a91357acdfabecc645219239517df3dea50dbb25d104aea90b52c454a7ff2dbc", 0x101, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001340)={0x40}, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000012c0)={0x5, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={r1, 0x39, 0x8}, 0xc) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={&(0x7f0000000000)="d7bef2fde18913f12637f705584fc4b84fe7e817248a2f11bda6c7fe8e898f79244573bcea966b8c0ecd54342cfc8704c401d3c92bdbecfbc7cc53e7481d91fff5d65998eb762c4aa0e812410e6d18d9a4b4c3d0839cf1c5", &(0x7f0000000100)=""/4096, &(0x7f0000001100)="e0f1277a16ee1708486465f34c23dd57ffc45499dcefce1dfaea117803249de0964269297a4fe10374b16e658e68e0e04ba7d24ff448af6d9433177f9c794a29f1665ecee846db0fb24e72b42ea750902c2be5101289773c3f97858ea2fefe0b4530eaffd4ef2eff6b6f5f47a386568fdbb89b0c56787c34f775e2c9395f82d177968072f91be4581cfd999f83a19e4b8a377abd0edcf8441658986c127c430feb5de8fb95", &(0x7f00000011c0)="05c6395aaa60ec024b47b8bba4a498e0606f67231807d1f1c92d905ffa23440970b4d53d090d5dc5943038b83c1e109a71a7ccd89529db503f8a3629971749e4c5c1d1a3f8aa0e3327e262e9baae2c3af19975dfafe6bce52a5184e324ecf80312d0a812f9b13c5ad98680ee1d131face243f0d5878e120fdbda12f6fb03154c316fd5821de641db83b813ec10e62c3f9e7939ef30b3a0cefd808564fa9ba7ce9a4050ec795f68524dc3cc4638f4708d8f3d9e321cd1a91357acdfabecc645219239517df3dea50dbb25d104aea90b52c454a7ff2dbc", 0x101, 0xffffffffffffffff, 0x4}, 0x38) (async) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001340)={0x40}, 0x4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000012c0)={0x5}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={r1, 0x39, 0x8}, 0xc) (async) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x45ec41) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14b560045611f06ccae11874330252e5a7b8ca24b70c29da51361fda46aa779f4c53ed29711e7fbda4b4cd5ed2260ecaec6d5dc8367150fd75a9ed2e534f896edc38608871fb41199c15d3b06d2d82ab53b8e416ccea1e322b57ed06", @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400d10008006a00000000000c0025800600020000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'veth0_virt_wifi\x00', 0x0}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0x0, 0x3}, {0x4, 0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}]}, 0x34}}, 0x40800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf25130000002800018008000300000000000800030001000000140002006d61637365633000000000000000000058000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d367265673100000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000300020000001400020076657468305f746f5f626174616476001400020064766d72703000000000000000000000080003000000000020000180080003000000000014000200767863616e3100"/92], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xdc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc884}, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x9, 0x2, 0x8, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r14, 0x21, r15, 0x8, &(0x7f0000000580)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r0, r0, r0]}, 0x80) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x17c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000090}, 0x80) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x45ec41) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14b560045611f06ccae11874330252e5a7b8ca24b70c29da51361fda46aa779f4c53ed29711e7fbda4b4cd5ed2260ecaec6d5dc8367150fd75a9ed2e534f896edc38608871fb41199c15d3b06d2d82ab53b8e416ccea1e322b57ed06", @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400d10008006a00000000000c0025800600020000000000"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'veth0_virt_wifi\x00', 0x0}) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0x0, 0x3}, {0x4, 0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}]}, 0x34}}, 0x40800) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf25130000002800018008000300000000000800030001000000140002006d61637365633000000000000000000058000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d367265673100000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000300020000001400020076657468305f746f5f626174616476001400020064766d72703000000000000000000000080003000000000020000180080003000000000014000200767863616e3100"/92], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xdc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc884}, 0x800) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) (async) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x9, 0x2, 0x8, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r14, 0x21, r15, 0x8, &(0x7f0000000580)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r0, r0, r0]}, 0x80) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1000, 0x10}, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x3f, 0xff, 0x26b, 0x82, r3, 0x7, '\x00', r2, r4, 0x0, 0x4, 0x4}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) [ 1255.694934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x17c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000090}, 0x80) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:05 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14b560045611f06ccae11874330252e5a7b8ca24b70c29da51361fda46aa779f4c53ed29711e7fbda4b4cd5ed2260ecaec6d5dc8367150fd75a9ed2e534f896edc38608871fb41199c15d3b06d2d82ab53b8e416ccea1e322b57ed06", @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000400d10008006a00000000000c0025800600020000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'veth0_virt_wifi\x00', 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0x0, 0x3}, {0x4, 0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}]}, 0x34}}, 0x40800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf25130000002800018008000300000000000800030001000000140002006d61637365633000000000000000000058000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d367265673100000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000300020000001400020076657468305f746f5f626174616476001400020064766d72703000000000000000000000080003000000000020000180080003000000000014000200767863616e3100"/92], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf25130000002800018008000300000000000800030001000000140002006d61637365633000000000000000000058000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020070696d367265673100000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000300020000001400020076657468305f746f5f626174616476001400020064766d72703000000000000000000000080003000000000020000180080003000000000014000200767863616e3100"/92], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xdc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc884}, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14}, 0x48) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x9, 0x2, 0x8, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', r14, 0x21, r15, 0x8, &(0x7f0000000580)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x9, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r0, r0, r0]}, 0x80) 17:38:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1000, 0x10}, 0xc) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x3f, 0xff, 0x26b, 0x82, r3, 0x7, '\x00', r2, r4, 0x0, 0x4, 0x4}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x17c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000090}, 0x80) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:05 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1255.855591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:05 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1000, 0x10}, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x3f, 0xff, 0x26b, 0x82, r3, 0x7, '\x00', r2, r4, 0x0, 0x4, 0x4}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x1ff, 0x4, 0x1000, 0x20, r0, 0xc1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x301040, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x61b9, 0x5, 0x4, 0x601, 0x1, 0xfba, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x1}, 0x48) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x48bc}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x2, 0xd, 0x80, 0x10}, @generic={0x1, 0x4, 0x8, 0xd96b, 0x80000001}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ldst={0x2, 0x1, 0x1, 0x1, 0x5, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0xfffffffc, 0xffff0dce}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, r0, r4, r5, r0, r0, r6, r7, r8]}, 0x80) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x7, 0x9, 0x0, 0x5, 0x410, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x800, 0x4, 0x3fd, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async, rerun: 32) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1000, 0x10}, 0xc) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x3f, 0xff, 0x26b, 0x82, r3, 0x7, '\x00', r2, r4, 0x0, 0x4, 0x4}, 0x48) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x1ff, 0x4, 0x1000, 0x20, r0, 0xc1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r1, 0x4) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x301040, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0xc) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x61b9, 0x5, 0x4, 0x601, 0x1, 0xfba, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x1}, 0x48) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x48bc}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x2, 0xd, 0x80, 0x10}, @generic={0x1, 0x4, 0x8, 0xd96b, 0x80000001}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ldst={0x2, 0x1, 0x1, 0x1, 0x5, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0xfffffffc, 0xffff0dce}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, r0, r4, r5, r0, r0, r6, r7, r8]}, 0x80) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x7, 0x9, 0x0, 0x5, 0x410, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x800, 0x4, 0x3fd, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x1ff, 0x4, 0x1000, 0x20, r0, 0xc1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x301040, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1ff}, 0xc) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x61b9, 0x5, 0x4, 0x601, 0x1, 0xfba, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x1}, 0x48) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x48bc}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x2, 0xd, 0x80, 0x10}, @generic={0x1, 0x4, 0x8, 0xd96b, 0x80000001}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ldst={0x2, 0x1, 0x1, 0x1, 0x5, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0xfffffffc, 0xffff0dce}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, r0, r4, r5, r0, r0, r6, r7, r8]}, 0x80) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x2, 0x7, 0x9, 0x0, 0x5, 0x410, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x800, 0x4, 0x3fd, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) [ 1256.217555] validate_nla: 89 callbacks suppressed [ 1256.217565] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101100) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x402441, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0085c2f5feae7a0342001400000008000400f90a0000080013000010000005000b0000000000050019000100000008001600c6d600000800160007000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:06 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) 17:38:06 executing program 2: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) [ 1256.284493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1256.313080] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2885}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101100) (async, rerun: 32) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x402441, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0085c2f5feae7a0342001400000008000400f90a0000080013000010000005000b0000000000050019000100000008001600c6d600000800160007000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:06 executing program 2: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) [ 1256.414405] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1256.433322] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2885}, 0x40) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (rerun: 32) 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1256.456582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x48051) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x6c1b, 0x4) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101100) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x402441, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0085c2f5feae7a0342001400000008000400f90a0000080013000010000005000b0000000000050019000100000008001600c6d600000800160007000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2885}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:06 executing program 2: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:06 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000004"], 0x2c}}, 0x0) [ 1256.573913] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:06 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x7fffffff, &(0x7f0000000080)=[0x0], 0x1}, 0x20) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1256.622999] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000}, 0x48) 17:38:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @window={0x3, 0x80, 0x2}], 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000140)="3f33428f107df46a3ff8f8390c2cc275057d8a630fffc547821e12f02a0b938b7edc1c0b6f954abf85b5017728078b53199060134e668fe1298b7237985e70bc7bb853ba92cbae850b2113749cb826411a605dcd53e3ff90d532e3d3f748e823a58f17d96d649a1fd4556de53cec1cf8b44aa49a776663e7c36f0959e7ac627fc73a7d3d0bfa07644fceae33fa41849ddc97ff29154d886f307e39ab2276617c433f15e5b775424fedef23bed89c2e8a9f4d7f66bfbc29ea86aa9851bf0aa5c1896fde2fead616e43095285c3d25c9314dd8d7859d52779e4ff0106e4aa46c6b5886", 0xe2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0x5452, r3) 17:38:06 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = socket$pptp(0x18, 0x1, 0x2) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x7fffffff, &(0x7f0000000080)=[0x0], 0x1}, 0x20) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) 17:38:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @window={0x3, 0x80, 0x2}], 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000140)="3f33428f107df46a3ff8f8390c2cc275057d8a630fffc547821e12f02a0b938b7edc1c0b6f954abf85b5017728078b53199060134e668fe1298b7237985e70bc7bb853ba92cbae850b2113749cb826411a605dcd53e3ff90d532e3d3f748e823a58f17d96d649a1fd4556de53cec1cf8b44aa49a776663e7c36f0959e7ac627fc73a7d3d0bfa07644fceae33fa41849ddc97ff29154d886f307e39ab2276617c433f15e5b775424fedef23bed89c2e8a9f4d7f66bfbc29ea86aa9851bf0aa5c1896fde2fead616e43095285c3d25c9314dd8d7859d52779e4ff0106e4aa46c6b5886", 0xe2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0x5452, r3) [ 1256.705983] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:38:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000}, 0x48) [ 1256.760767] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:06 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:38:06 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @window={0x3, 0x80, 0x2}], 0x6) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000140)="3f33428f107df46a3ff8f8390c2cc275057d8a630fffc547821e12f02a0b938b7edc1c0b6f954abf85b5017728078b53199060134e668fe1298b7237985e70bc7bb853ba92cbae850b2113749cb826411a605dcd53e3ff90d532e3d3f748e823a58f17d96d649a1fd4556de53cec1cf8b44aa49a776663e7c36f0959e7ac627fc73a7d3d0bfa07644fceae33fa41849ddc97ff29154d886f307e39ab2276617c433f15e5b775424fedef23bed89c2e8a9f4d7f66bfbc29ea86aa9851bf0aa5c1896fde2fead616e43095285c3d25c9314dd8d7859d52779e4ff0106e4aa46c6b5886", 0xe2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$NBD_SET_SOCK(r1, 0x5452, r3) 17:38:06 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0x7fffffff, &(0x7f0000000080)=[0x0], 0x1}, 0x20) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) [ 1256.806935] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000}, 0x48) (async) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf257000000008501dfb1ca58470731fc8439b00dd1533ebe3686713e41baed65d620dfd074dde75a4e4d149433e0523ce4b75dfa21dc8fd9842838241e6fb4d67aeed30ad74b7eab76df7c064fd12af1b2551199293be7d8b9f311bb5e7d03004904a4ea9e3ec8d98f974d6a07716f19cfa4141678f2bcaaafc26712671a16b6500000000a2f62f827fc2691027deeabd41fc66a42e4e2fd4fc2fffc241ec895939d9ccd5b169d5f1a4e13c0a10db8249207d5f2d2abf4080e7033ea284d8b271aeabf670d50787c4065afb9a62cca076ac283c4ed94fe52eee34440de006d5c9b3d85f7882c93670c1bc4695b1ffc30dd747bfde74c0c6db31a8803b32eb62c8063dd72098e2fbf67fe1c82ad199f0994487d7aefcda", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10300, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$NBD_SET_SOCK(r3, 0x5421, 0xffffffffffffffff) [ 1256.914651] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1256.940853] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000"], 0x2c}}, 0x0) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="184b0000feffffff00000000000006e74f001821", @ANYRES32=r0, @ANYBLOB="0000000000000080"], &(0x7f0000000040)='syzkaller\x00', 0x3c35, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x65}, 0x10}, 0x80) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10300, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$NBD_SET_SOCK(r3, 0x5421, 0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f00000001c0)=0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10300, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) ioctl$NBD_SET_SOCK(r3, 0x5421, 0xffffffffffffffff) (async) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf257000000008501dfb1ca58470731fc8439b00dd1533ebe3686713e41baed65d620dfd074dde75a4e4d149433e0523ce4b75dfa21dc8fd9842838241e6fb4d67aeed30ad74b7eab76df7c064fd12af1b2551199293be7d8b9f311bb5e7d03004904a4ea9e3ec8d98f974d6a07716f19cfa4141678f2bcaaafc26712671a16b6500000000a2f62f827fc2691027deeabd41fc66a42e4e2fd4fc2fffc241ec895939d9ccd5b169d5f1a4e13c0a10db8249207d5f2d2abf4080e7033ea284d8b271aeabf670d50787c4065afb9a62cca076ac283c4ed94fe52eee34440de006d5c9b3d85f7882c93670c1bc4695b1ffc30dd747bfde74c0c6db31a8803b32eb62c8063dd72098e2fbf67fe1c82ad199f0994487d7aefcda", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="184b0000feffffff00000000000006e74f001821", @ANYRES32=r0, @ANYBLOB="0000000000000080"], &(0x7f0000000040)='syzkaller\x00', 0x3c35, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x65}, 0x10}, 0x80) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 0: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f00000001c0)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10300, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$NBD_SET_SOCK(r3, 0x5421, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r3, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="184b0000feffffff00000000000006e74f001821", @ANYRES32=r0, @ANYBLOB="0000000000000080"], &(0x7f0000000040)='syzkaller\x00', 0x3c35, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x65}, 0x10}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="184b0000feffffff00000000000006e74f001821", @ANYRES32=r0, @ANYBLOB="0000000000000080"], &(0x7f0000000040)='syzkaller\x00', 0x3c35, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x65}, 0x10}, 0x80) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x4, 0x2, 0x561, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x5}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0xa00, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@generic={0x20, 0xf, 0x8, 0x3, 0x6}, @generic={0x9, 0x2, 0x6, 0x2, 0x3ff}, @jmp={0x5, 0x0, 0x5, 0x9, 0x7, 0x18, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x1, 0x9, 0x7, 0x6, 0x1000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x596, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000900)='GPL\x00', 0x3, 0xf8, &(0x7f0000000940)=""/248, 0x40f00, 0xc6cb7fe2bd377aed, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x1, 0x1, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r3, r0, r4, r5]}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2132020}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e8, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x4804) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, 0x0) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x9, r13, 0x8, &(0x7f0000000140)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xd, 0x8, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r0, r0, r15, r14, r0]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fff, 0x37a, 0x4, 0x1008, r0, 0x10005, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r16}, 0xc) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r17, 0x894b, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup=r5, r4, 0x1f, 0x3}, 0x14) ioctl$ASHMEM_SET_SIZE(r17, 0x40087703, 0x2) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1c1400) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1c1400) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x4, 0x2, 0x561, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x5}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0xa00, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@generic={0x20, 0xf, 0x8, 0x3, 0x6}, @generic={0x9, 0x2, 0x6, 0x2, 0x3ff}, @jmp={0x5, 0x0, 0x5, 0x9, 0x7, 0x18, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x1, 0x9, 0x7, 0x6, 0x1000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x596, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000900)='GPL\x00', 0x3, 0xf8, &(0x7f0000000940)=""/248, 0x40f00, 0xc6cb7fe2bd377aed, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x1, 0x1, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r3, r0, r4, r5]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2132020}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e8, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x4804) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, 0x0) (async) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x9, r13, 0x8, &(0x7f0000000140)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xd, 0x8, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r0, r0, r15, r14, r0]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fff, 0x37a, 0x4, 0x1008, r0, 0x10005, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x8}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r16}, 0xc) (async) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r17, 0x894b, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup=r5, r4, 0x1f, 0x3}, 0x14) (async) ioctl$ASHMEM_SET_SIZE(r17, 0x40087703, 0x2) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1c1400) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x4, 0x2, 0x561, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x5}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0xa00, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@generic={0x20, 0xf, 0x8, 0x3, 0x6}, @generic={0x9, 0x2, 0x6, 0x2, 0x3ff}, @jmp={0x5, 0x0, 0x5, 0x9, 0x7, 0x18, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x1, 0x9, 0x7, 0x6, 0x1000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x596, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000900)='GPL\x00', 0x3, 0xf8, &(0x7f0000000940)=""/248, 0x40f00, 0xc6cb7fe2bd377aed, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x1, 0x1, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r3, r0, r4, r5]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2132020}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e8, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x4804) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, 0x0) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, 0x0) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x9, r13, 0x8, &(0x7f0000000140)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xd, 0x8, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r0, r0, r15, r14, r0]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fff, 0x37a, 0x4, 0x1008, r0, 0x10005, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x8}, 0x48) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r16}, 0xc) r17 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r17, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup=r5, r4, 0x1f, 0x3}, 0x14) ioctl$ASHMEM_SET_SIZE(r17, 0x40087703, 0x2) 17:38:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x975b0000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf257000000008501dfb1ca58470731fc8439b00dd1533ebe3686713e41baed65d620dfd074dde75a4e4d149433e0523ce4b75dfa21dc8fd9842838241e6fb4d67aeed30ad74b7eab76df7c064fd12af1b2551199293be7d8b9f311bb5e7d03004904a4ea9e3ec8d98f974d6a07716f19cfa4141678f2bcaaafc26712671a16b6500000000a2f62f827fc2691027deeabd41fc66a42e4e2fd4fc2fffc241ec895939d9ccd5b169d5f1a4e13c0a10db8249207d5f2d2abf4080e7033ea284d8b271aeabf670d50787c4065afb9a62cca076ac283c4ed94fe52eee34440de006d5c9b3d85f7882c93670c1bc4695b1ffc30dd747bfde74c0c6db31a8803b32eb62c8063dd72098e2fbf67fe1c82ad199f0994487d7aefcda", @ANYRES16=r4, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:07 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf257000000008501dfb1ca58470731fc8439b00dd1533ebe3686713e41baed65d620dfd074dde75a4e4d149433e0523ce4b75dfa21dc8fd9842838241e6fb4d67aeed30ad74b7eab76df7c064fd12af1b2551199293be7d8b9f311bb5e7d03004904a4ea9e3ec8d98f974d6a07716f19cfa4141678f2bcaaafc26712671a16b6500000000a2f62f827fc2691027deeabd41fc66a42e4e2fd4fc2fffc241ec895939d9ccd5b169d5f1a4e13c0a10db8249207d5f2d2abf4080e7033ea284d8b271aeabf670d50787c4065afb9a62cca076ac283c4ed94fe52eee34440de006d5c9b3d85f7882c93670c1bc4695b1ffc30dd747bfde74c0c6db31a8803b32eb62c8063dd72098e2fbf67fe1c82ad199f0994487d7aefcda", @ANYRES16=r3, @ANYBLOB="6229335ef82b8a10ef0433bdcd68947fd5d6b6df1ee38bbcaffa509eba253ff5e790bd526b1b53680bce325436a825f6c99e7753903feaeafdff807c12e5736fbdb6b5163421b925a22cf332986a3dbde1b52919527ab378688f8adf13c0338981433e2731ac9058dc6f4dcff13c171859507607a43926d1c207f86d38d14cf446cf598abb54d3d5afe2c5e823ba681b6ccbd8b3ac74525985f7c67909829ce63642c6cbe1f20028f05d95319299db8d3b58aab24292c2aa8e6a0ffd9d6914c9ed80"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x945c0000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc25400ea8072865d5048113d39683909ec2", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00238005000600080000002c00238008001c000500000008000900090000000500070020000000060010000100000008001a0002000000"], 0x54}, 0x1, 0x0, 0x0, 0x6ec7ca1dffaab15f}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1b8, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fa9a11b84d21b43}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0xf) 17:38:08 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='}\x00') ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='}\x00') (async, rerun: 32) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (rerun: 32) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc25400ea8072865d5048113d39683909ec2", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00238005000600080000002c00238008001c000500000008000900090000000500070020000000060010000100000008001a0002000000"], 0x54}, 0x1, 0x0, 0x0, 0x6ec7ca1dffaab15f}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1b8, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fa9a11b84d21b43}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0xf) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='}\x00') ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc25400ea8072865d5048113d39683909ec2", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00238005000600080000002c00238008001c000500000008000900090000000500070020000000060010000100000008001a0002000000"], 0x54}, 0x1, 0x0, 0x0, 0x6ec7ca1dffaab15f}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1b8, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fa9a11b84d21b43}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0xf) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (rerun: 64) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) 17:38:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0xfffffffffffffca0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80) ioctl$NBD_SET_SOCK(r3, 0x5452, 0xffffffffffffffff) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0xfffffffffffffca0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80) ioctl$NBD_SET_SOCK(r3, 0x5452, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0xfffffffffffffca0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80) (async) ioctl$NBD_SET_SOCK(r3, 0x5452, 0xffffffffffffffff) (async) 17:38:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x80000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0xfffffffffffffca0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80) ioctl$NBD_SET_SOCK(r3, 0x5452, 0xffffffffffffffff) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000020", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040001) 17:38:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x80000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) (async) 17:38:09 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x80000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1}) (async) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040001) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040001) 17:38:09 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xfffff000, @remote, 0x2}}, 0x0, 0x0, 0x3e, 0x0, "95537a320c92c6392ac5c3aaa20cdbab1772139cf375dcb389e9d1e006cb4c484682339a54bd1c637fef79de3dfe9988bb3fafde095ddc69c47b4f7f587487af6968eb705bb6f520f7fb6ef178c6ac82"}, 0xd8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7deee5dc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x9, 0x4, 0x5, 0xe6, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x84, 0xcf40, 0x98, 0x8001, 0x80, 0x20]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x6, 0x48, 0x36, 0x9, 0x18, 0x4, 0x60, 0x30, 0x36, 0x28, 0x2c, 0xc, 0xc, 0xa, 0x5, 0x14, 0x60, 0x4, 0x6c, 0x48, 0x4, 0x30, 0x1b, 0x1b, 0x30, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x7}, {0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x6, 0x8}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36e, 0x2, 0x200, 0x3, 0x8, 0x5, 0x0, 0x20]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x48, 0x1b, 0x1, 0x4, 0x6, 0x6c, 0x7, 0xc, 0x48, 0x3, 0x36, 0x3, 0x6c, 0x36, 0x16, 0x9, 0x1b]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x97b7, 0xf806, 0xfff, 0x1000, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xf371, 0x4, 0x3d7, 0x1000, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x5}, {0x1}, {0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xe32, 0xe290, 0x2, 0x7, 0x40, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x1, 0x66, 0x5, 0x9a8, 0x3f, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xabc, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc92, 0x2, 0x4, 0x2, 0x200, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x1}, {0x7, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x6}, {}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0xf}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x6}, {0x4}, {0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1f}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x0, 0x400, 0x2, 0x20, 0x401, 0x807c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe24, 0xff, 0x9, 0xfff, 0xab, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x100, 0x7ff, 0x2, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x32, 0x1b, 0x1b, 0x3, 0x6, 0x16, 0x12, 0xc, 0x48, 0x24, 0xc, 0xc, 0x12, 0x24, 0x36, 0x17, 0x5, 0x24, 0x5, 0x4, 0x12, 0xc, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3f, 0x8, 0x4, 0x20, 0x49, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x57, 0x31, 0x30, 0x2, 0x57, 0x48, 0x4, 0xb, 0x0, 0x60, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x18, 0x60, 0x9, 0x4, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x80}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f40, 0x2, 0xfff7, 0x5, 0xfc16, 0x9, 0x3, 0xc505]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}]}, {0x4c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x484, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0xd}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x1b}, {0x4, 0x3}, {0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x81, 0x6, 0x9, 0x20, 0x8, 0x7ff, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x2}, {0x5, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2195, 0xfffd, 0x80, 0x8, 0x3, 0xb5, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7f, 0x4e, 0xfcc, 0x3f, 0x9, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf45, 0x97, 0x7, 0x7f, 0x200, 0x7, 0xc64d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xc9d7, 0x5, 0x3, 0x80, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0x800, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0x7ff, 0x5, 0x3f, 0x8000, 0x1, 0x774]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0xfff, 0x6, 0x8, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0x4, 0x8000, 0xdd, 0x7, 0xd1a8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x1}, {0x4, 0x2}, {0x4}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x3, 0x30, 0x4, 0xb, 0x4, 0x5, 0x4, 0x16, 0x1, 0x60, 0x48, 0x24, 0x6, 0x6, 0x2a80788b739b30f1, 0x18, 0x60, 0x16, 0x60, 0x7a, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x6, 0x7fff, 0x9, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x16, 0x48, 0x60, 0x9, 0x60, 0x6, 0x1, 0x1, 0x6c, 0x24, 0x16, 0x30, 0x15, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3e, 0x60, 0x6, 0x16, 0x2, 0x9, 0x12, 0x1, 0x12, 0x18, 0x4, 0x4, 0x60, 0x1b, 0x4, 0xb, 0x6c, 0x12, 0x4, 0x16, 0x24, 0x60, 0x6, 0x9, 0xb, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7a9a, 0xa3, 0x1ff, 0x703, 0x40, 0x0, 0x20]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x36, 0x61, 0x6c, 0x16, 0x20, 0x3, 0x2, 0x36, 0x4, 0x0, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x7, 0x2, 0xa, 0x1, 0xa5, 0x7f, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x5, 0x2, 0x400, 0x2c, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xa647, 0x1, 0x3f, 0x8, 0x1f, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xf0f, 0x400, 0xffff, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1f, 0x3, 0x3, 0x4, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x7ff, 0x5, 0x8, 0x3, 0x101, 0x7]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x6}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x2}, {0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x24, 0x24, 0x12, 0x0, 0x36, 0x48, 0x36, 0x5, 0x18, 0x16, 0x24, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0x4, 0x40, 0xfffd, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x97, 0xffff, 0x1, 0xf2a9, 0x86b, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x18}, {0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf73, 0x2000, 0x7, 0x9, 0x5, 0x7fff, 0xe8ac, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x16, 0x9, 0x6, 0x30, 0x12, 0x1, 0x3, 0x60, 0x0, 0x4, 0x3f, 0x24, 0x36, 0x0, 0x18, 0x3, 0x0, 0x48, 0x2, 0x48, 0x1, 0xc, 0x42, 0x18, 0x3, 0x12, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x401, 0x1ff, 0x800, 0x12, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0xfb, 0x401, 0x7fff, 0x7, 0x40]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffbff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf43f, 0x0, 0x3ff, 0x8c2, 0x2, 0xbb, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x7e3b, 0x8, 0x5, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4211, 0x0, 0x6, 0x33d5, 0x8, 0x6, 0x800, 0xf32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea74, 0xc5d, 0x81, 0x5, 0x9, 0x8001, 0x1309, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0x8, 0x800, 0x2, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x6, 0x4, 0x3, 0xfff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4ff0df32ec0e043b, 0xb, 0x12, 0x4]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x800, 0x8, 0x1, 0xc4, 0xdb, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0xfffa, 0x1f, 0x4, 0xfffd, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x44b6, 0x1f, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x5, 0x9, 0x2, 0xa9ce, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ca4, 0x800, 0x0, 0x8, 0x8001, 0x8001, 0x4, 0x200]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x18, 0x5, 0x11, 0x6, 0x18, 0x36, 0xb, 0x48, 0x16, 0x60, 0x6c, 0x4, 0x1, 0x4, 0x2, 0x1b, 0x18, 0x30, 0x9, 0x60, 0xc, 0x9, 0x1, 0x24, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x3}, {0x1}, {0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x32c, 0x0, 0x8, 0x4, 0x9, 0x6, 0x9, 0xfff]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x18, 0x9, 0x16, 0x30, 0x6c, 0x4, 0x0, 0x18, 0x6, 0x36, 0xb, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffb, 0x6, 0x7fff, 0x9, 0x258, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x28, 0x3, 0x2, 0x5, 0x4, 0x3, 0xc, 0x24, 0x60, 0xc, 0x5, 0x48, 0xc, 0x2, 0x12, 0x4, 0x36, 0x12, 0xc, 0x30, 0x60, 0x2, 0x60, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x17}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {}, {0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d0, 0x8ad1, 0x6e00, 0xd060, 0x5, 0x3, 0x3ff, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xe7, 0x921e, 0x1712, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x36, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfeff, 0x8, 0x0, 0x4, 0x0, 0xe37a, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf912, 0x1, 0x4, 0x3ff, 0x0, 0x7ff, 0x8, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x12, 0x24, 0x6c, 0x3, 0x0, 0x2, 0x24, 0x1, 0x24, 0x2, 0x3, 0x1, 0x1b, 0x48, 0x1, 0x3, 0x1, 0x60, 0x9, 0x6c, 0x48, 0x60, 0x3, 0x30, 0x18, 0x6, 0x60, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x40, 0x1, 0x9, 0x9, 0x0, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x0, 0x188e, 0x9c2, 0x100, 0x0, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0xaf, 0x6, 0x1, 0x7, 0x3f, 0xffe0, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x8}, {}, {0x2, 0x6}, {0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1, 0x999, 0x8000, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x5}, {0x5, 0x6}, {0x0, 0xa}, {}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xd6, 0x97f, 0x7fff, 0x3800, 0x40, 0x0, 0x1f3b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfffa, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x7}, {0x2}, {0x3, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000075) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000002c0), 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, r0) 17:38:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc0000}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0x81, &(0x7f0000000140)=""/129, 0x41100, 0x30, '\x00', 0x0, 0x5, r0, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040001) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040001) 17:38:09 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xfffff000, @remote, 0x2}}, 0x0, 0x0, 0x3e, 0x0, "95537a320c92c6392ac5c3aaa20cdbab1772139cf375dcb389e9d1e006cb4c484682339a54bd1c637fef79de3dfe9988bb3fafde095ddc69c47b4f7f587487af6968eb705bb6f520f7fb6ef178c6ac82"}, 0xd8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7deee5dc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x9, 0x4, 0x5, 0xe6, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x84, 0xcf40, 0x98, 0x8001, 0x80, 0x20]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x6, 0x48, 0x36, 0x9, 0x18, 0x4, 0x60, 0x30, 0x36, 0x28, 0x2c, 0xc, 0xc, 0xa, 0x5, 0x14, 0x60, 0x4, 0x6c, 0x48, 0x4, 0x30, 0x1b, 0x1b, 0x30, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x7}, {0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x6, 0x8}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36e, 0x2, 0x200, 0x3, 0x8, 0x5, 0x0, 0x20]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x48, 0x1b, 0x1, 0x4, 0x6, 0x6c, 0x7, 0xc, 0x48, 0x3, 0x36, 0x3, 0x6c, 0x36, 0x16, 0x9, 0x1b]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x97b7, 0xf806, 0xfff, 0x1000, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xf371, 0x4, 0x3d7, 0x1000, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x5}, {0x1}, {0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xe32, 0xe290, 0x2, 0x7, 0x40, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x1, 0x66, 0x5, 0x9a8, 0x3f, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xabc, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc92, 0x2, 0x4, 0x2, 0x200, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x1}, {0x7, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x6}, {}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0xf}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x6}, {0x4}, {0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1f}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x0, 0x400, 0x2, 0x20, 0x401, 0x807c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe24, 0xff, 0x9, 0xfff, 0xab, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x100, 0x7ff, 0x2, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x32, 0x1b, 0x1b, 0x3, 0x6, 0x16, 0x12, 0xc, 0x48, 0x24, 0xc, 0xc, 0x12, 0x24, 0x36, 0x17, 0x5, 0x24, 0x5, 0x4, 0x12, 0xc, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3f, 0x8, 0x4, 0x20, 0x49, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x57, 0x31, 0x30, 0x2, 0x57, 0x48, 0x4, 0xb, 0x0, 0x60, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x18, 0x60, 0x9, 0x4, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x80}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f40, 0x2, 0xfff7, 0x5, 0xfc16, 0x9, 0x3, 0xc505]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}]}, {0x4c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x484, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0xd}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x1b}, {0x4, 0x3}, {0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x81, 0x6, 0x9, 0x20, 0x8, 0x7ff, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x2}, {0x5, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2195, 0xfffd, 0x80, 0x8, 0x3, 0xb5, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7f, 0x4e, 0xfcc, 0x3f, 0x9, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf45, 0x97, 0x7, 0x7f, 0x200, 0x7, 0xc64d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xc9d7, 0x5, 0x3, 0x80, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0x800, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0x7ff, 0x5, 0x3f, 0x8000, 0x1, 0x774]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0xfff, 0x6, 0x8, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0x4, 0x8000, 0xdd, 0x7, 0xd1a8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x1}, {0x4, 0x2}, {0x4}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x3, 0x30, 0x4, 0xb, 0x4, 0x5, 0x4, 0x16, 0x1, 0x60, 0x48, 0x24, 0x6, 0x6, 0x2a80788b739b30f1, 0x18, 0x60, 0x16, 0x60, 0x7a, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x6, 0x7fff, 0x9, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x16, 0x48, 0x60, 0x9, 0x60, 0x6, 0x1, 0x1, 0x6c, 0x24, 0x16, 0x30, 0x15, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3e, 0x60, 0x6, 0x16, 0x2, 0x9, 0x12, 0x1, 0x12, 0x18, 0x4, 0x4, 0x60, 0x1b, 0x4, 0xb, 0x6c, 0x12, 0x4, 0x16, 0x24, 0x60, 0x6, 0x9, 0xb, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7a9a, 0xa3, 0x1ff, 0x703, 0x40, 0x0, 0x20]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x36, 0x61, 0x6c, 0x16, 0x20, 0x3, 0x2, 0x36, 0x4, 0x0, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x7, 0x2, 0xa, 0x1, 0xa5, 0x7f, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x5, 0x2, 0x400, 0x2c, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xa647, 0x1, 0x3f, 0x8, 0x1f, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xf0f, 0x400, 0xffff, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1f, 0x3, 0x3, 0x4, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x7ff, 0x5, 0x8, 0x3, 0x101, 0x7]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x6}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x2}, {0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x24, 0x24, 0x12, 0x0, 0x36, 0x48, 0x36, 0x5, 0x18, 0x16, 0x24, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0x4, 0x40, 0xfffd, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x97, 0xffff, 0x1, 0xf2a9, 0x86b, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x18}, {0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf73, 0x2000, 0x7, 0x9, 0x5, 0x7fff, 0xe8ac, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x16, 0x9, 0x6, 0x30, 0x12, 0x1, 0x3, 0x60, 0x0, 0x4, 0x3f, 0x24, 0x36, 0x0, 0x18, 0x3, 0x0, 0x48, 0x2, 0x48, 0x1, 0xc, 0x42, 0x18, 0x3, 0x12, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x401, 0x1ff, 0x800, 0x12, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0xfb, 0x401, 0x7fff, 0x7, 0x40]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffbff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf43f, 0x0, 0x3ff, 0x8c2, 0x2, 0xbb, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x7e3b, 0x8, 0x5, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4211, 0x0, 0x6, 0x33d5, 0x8, 0x6, 0x800, 0xf32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea74, 0xc5d, 0x81, 0x5, 0x9, 0x8001, 0x1309, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0x8, 0x800, 0x2, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x6, 0x4, 0x3, 0xfff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4ff0df32ec0e043b, 0xb, 0x12, 0x4]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x800, 0x8, 0x1, 0xc4, 0xdb, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0xfffa, 0x1f, 0x4, 0xfffd, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x44b6, 0x1f, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x5, 0x9, 0x2, 0xa9ce, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ca4, 0x800, 0x0, 0x8, 0x8001, 0x8001, 0x4, 0x200]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x18, 0x5, 0x11, 0x6, 0x18, 0x36, 0xb, 0x48, 0x16, 0x60, 0x6c, 0x4, 0x1, 0x4, 0x2, 0x1b, 0x18, 0x30, 0x9, 0x60, 0xc, 0x9, 0x1, 0x24, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x3}, {0x1}, {0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x32c, 0x0, 0x8, 0x4, 0x9, 0x6, 0x9, 0xfff]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x18, 0x9, 0x16, 0x30, 0x6c, 0x4, 0x0, 0x18, 0x6, 0x36, 0xb, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffb, 0x6, 0x7fff, 0x9, 0x258, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x28, 0x3, 0x2, 0x5, 0x4, 0x3, 0xc, 0x24, 0x60, 0xc, 0x5, 0x48, 0xc, 0x2, 0x12, 0x4, 0x36, 0x12, 0xc, 0x30, 0x60, 0x2, 0x60, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x17}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {}, {0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d0, 0x8ad1, 0x6e00, 0xd060, 0x5, 0x3, 0x3ff, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xe7, 0x921e, 0x1712, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x36, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfeff, 0x8, 0x0, 0x4, 0x0, 0xe37a, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf912, 0x1, 0x4, 0x3ff, 0x0, 0x7ff, 0x8, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x12, 0x24, 0x6c, 0x3, 0x0, 0x2, 0x24, 0x1, 0x24, 0x2, 0x3, 0x1, 0x1b, 0x48, 0x1, 0x3, 0x1, 0x60, 0x9, 0x6c, 0x48, 0x60, 0x3, 0x30, 0x18, 0x6, 0x60, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x40, 0x1, 0x9, 0x9, 0x0, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x0, 0x188e, 0x9c2, 0x100, 0x0, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0xaf, 0x6, 0x1, 0x7, 0x3f, 0xffe0, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x8}, {}, {0x2, 0x6}, {0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1, 0x999, 0x8000, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x5}, {0x5, 0x6}, {0x0, 0xa}, {}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xd6, 0x97f, 0x7fff, 0x3800, 0x40, 0x0, 0x1f3b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfffa, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x7}, {0x2}, {0x3, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000075) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000002c0), 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, r0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xfffff000, @remote, 0x2}}, 0x0, 0x0, 0x3e, 0x0, "95537a320c92c6392ac5c3aaa20cdbab1772139cf375dcb389e9d1e006cb4c484682339a54bd1c637fef79de3dfe9988bb3fafde095ddc69c47b4f7f587487af6968eb705bb6f520f7fb6ef178c6ac82"}, 0xd8) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7deee5dc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x9, 0x4, 0x5, 0xe6, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x84, 0xcf40, 0x98, 0x8001, 0x80, 0x20]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x6, 0x48, 0x36, 0x9, 0x18, 0x4, 0x60, 0x30, 0x36, 0x28, 0x2c, 0xc, 0xc, 0xa, 0x5, 0x14, 0x60, 0x4, 0x6c, 0x48, 0x4, 0x30, 0x1b, 0x1b, 0x30, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x7}, {0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x6, 0x8}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36e, 0x2, 0x200, 0x3, 0x8, 0x5, 0x0, 0x20]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x48, 0x1b, 0x1, 0x4, 0x6, 0x6c, 0x7, 0xc, 0x48, 0x3, 0x36, 0x3, 0x6c, 0x36, 0x16, 0x9, 0x1b]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x97b7, 0xf806, 0xfff, 0x1000, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xf371, 0x4, 0x3d7, 0x1000, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x5}, {0x1}, {0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xe32, 0xe290, 0x2, 0x7, 0x40, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x1, 0x66, 0x5, 0x9a8, 0x3f, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xabc, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc92, 0x2, 0x4, 0x2, 0x200, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x1}, {0x7, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x6}, {}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0xf}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x6}, {0x4}, {0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1f}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x0, 0x400, 0x2, 0x20, 0x401, 0x807c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe24, 0xff, 0x9, 0xfff, 0xab, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x100, 0x7ff, 0x2, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x32, 0x1b, 0x1b, 0x3, 0x6, 0x16, 0x12, 0xc, 0x48, 0x24, 0xc, 0xc, 0x12, 0x24, 0x36, 0x17, 0x5, 0x24, 0x5, 0x4, 0x12, 0xc, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3f, 0x8, 0x4, 0x20, 0x49, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x57, 0x31, 0x30, 0x2, 0x57, 0x48, 0x4, 0xb, 0x0, 0x60, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x18, 0x60, 0x9, 0x4, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x80}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f40, 0x2, 0xfff7, 0x5, 0xfc16, 0x9, 0x3, 0xc505]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}]}, {0x4c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x484, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0xd}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x1b}, {0x4, 0x3}, {0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x81, 0x6, 0x9, 0x20, 0x8, 0x7ff, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x2}, {0x5, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2195, 0xfffd, 0x80, 0x8, 0x3, 0xb5, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7f, 0x4e, 0xfcc, 0x3f, 0x9, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf45, 0x97, 0x7, 0x7f, 0x200, 0x7, 0xc64d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xc9d7, 0x5, 0x3, 0x80, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0x800, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0x7ff, 0x5, 0x3f, 0x8000, 0x1, 0x774]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0xfff, 0x6, 0x8, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0x4, 0x8000, 0xdd, 0x7, 0xd1a8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x1}, {0x4, 0x2}, {0x4}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x3, 0x30, 0x4, 0xb, 0x4, 0x5, 0x4, 0x16, 0x1, 0x60, 0x48, 0x24, 0x6, 0x6, 0x2a80788b739b30f1, 0x18, 0x60, 0x16, 0x60, 0x7a, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x6, 0x7fff, 0x9, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x16, 0x48, 0x60, 0x9, 0x60, 0x6, 0x1, 0x1, 0x6c, 0x24, 0x16, 0x30, 0x15, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3e, 0x60, 0x6, 0x16, 0x2, 0x9, 0x12, 0x1, 0x12, 0x18, 0x4, 0x4, 0x60, 0x1b, 0x4, 0xb, 0x6c, 0x12, 0x4, 0x16, 0x24, 0x60, 0x6, 0x9, 0xb, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7a9a, 0xa3, 0x1ff, 0x703, 0x40, 0x0, 0x20]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x36, 0x61, 0x6c, 0x16, 0x20, 0x3, 0x2, 0x36, 0x4, 0x0, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x7, 0x2, 0xa, 0x1, 0xa5, 0x7f, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x5, 0x2, 0x400, 0x2c, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xa647, 0x1, 0x3f, 0x8, 0x1f, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xf0f, 0x400, 0xffff, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1f, 0x3, 0x3, 0x4, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x7ff, 0x5, 0x8, 0x3, 0x101, 0x7]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x6}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x2}, {0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x24, 0x24, 0x12, 0x0, 0x36, 0x48, 0x36, 0x5, 0x18, 0x16, 0x24, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0x4, 0x40, 0xfffd, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x97, 0xffff, 0x1, 0xf2a9, 0x86b, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x18}, {0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf73, 0x2000, 0x7, 0x9, 0x5, 0x7fff, 0xe8ac, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x16, 0x9, 0x6, 0x30, 0x12, 0x1, 0x3, 0x60, 0x0, 0x4, 0x3f, 0x24, 0x36, 0x0, 0x18, 0x3, 0x0, 0x48, 0x2, 0x48, 0x1, 0xc, 0x42, 0x18, 0x3, 0x12, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x401, 0x1ff, 0x800, 0x12, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0xfb, 0x401, 0x7fff, 0x7, 0x40]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffbff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf43f, 0x0, 0x3ff, 0x8c2, 0x2, 0xbb, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x7e3b, 0x8, 0x5, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4211, 0x0, 0x6, 0x33d5, 0x8, 0x6, 0x800, 0xf32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea74, 0xc5d, 0x81, 0x5, 0x9, 0x8001, 0x1309, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0x8, 0x800, 0x2, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x6, 0x4, 0x3, 0xfff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4ff0df32ec0e043b, 0xb, 0x12, 0x4]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x800, 0x8, 0x1, 0xc4, 0xdb, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0xfffa, 0x1f, 0x4, 0xfffd, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x44b6, 0x1f, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x5, 0x9, 0x2, 0xa9ce, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ca4, 0x800, 0x0, 0x8, 0x8001, 0x8001, 0x4, 0x200]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x18, 0x5, 0x11, 0x6, 0x18, 0x36, 0xb, 0x48, 0x16, 0x60, 0x6c, 0x4, 0x1, 0x4, 0x2, 0x1b, 0x18, 0x30, 0x9, 0x60, 0xc, 0x9, 0x1, 0x24, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x3}, {0x1}, {0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x32c, 0x0, 0x8, 0x4, 0x9, 0x6, 0x9, 0xfff]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x18, 0x9, 0x16, 0x30, 0x6c, 0x4, 0x0, 0x18, 0x6, 0x36, 0xb, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffb, 0x6, 0x7fff, 0x9, 0x258, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x28, 0x3, 0x2, 0x5, 0x4, 0x3, 0xc, 0x24, 0x60, 0xc, 0x5, 0x48, 0xc, 0x2, 0x12, 0x4, 0x36, 0x12, 0xc, 0x30, 0x60, 0x2, 0x60, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x17}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {}, {0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d0, 0x8ad1, 0x6e00, 0xd060, 0x5, 0x3, 0x3ff, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xe7, 0x921e, 0x1712, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x36, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfeff, 0x8, 0x0, 0x4, 0x0, 0xe37a, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf912, 0x1, 0x4, 0x3ff, 0x0, 0x7ff, 0x8, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x12, 0x24, 0x6c, 0x3, 0x0, 0x2, 0x24, 0x1, 0x24, 0x2, 0x3, 0x1, 0x1b, 0x48, 0x1, 0x3, 0x1, 0x60, 0x9, 0x6c, 0x48, 0x60, 0x3, 0x30, 0x18, 0x6, 0x60, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x40, 0x1, 0x9, 0x9, 0x0, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x0, 0x188e, 0x9c2, 0x100, 0x0, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0xaf, 0x6, 0x1, 0x7, 0x3f, 0xffe0, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x8}, {}, {0x2, 0x6}, {0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1, 0x999, 0x8000, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x5}, {0x5, 0x6}, {0x0, 0xa}, {}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xd6, 0x97f, 0x7fff, 0x3800, 0x40, 0x0, 0x1f3b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfffa, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x7}, {0x2}, {0x3, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000075) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x5452, r0) (async) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x8000, 0x40, 0x1, 0x8008000, '\x00', 0x0, r0, 0x1, 0x4, 0x0, 0x7}, 0x48) 17:38:09 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc0000}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0x81, &(0x7f0000000140)=""/129, 0x41100, 0x30, '\x00', 0x0, 0x5, r0, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000020", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xfffff000, @remote, 0x2}}, 0x0, 0x0, 0x3e, 0x0, "95537a320c92c6392ac5c3aaa20cdbab1772139cf375dcb389e9d1e006cb4c484682339a54bd1c637fef79de3dfe9988bb3fafde095ddc69c47b4f7f587487af6968eb705bb6f520f7fb6ef178c6ac82"}, 0xd8) (async, rerun: 32) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x12a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7deee5dc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x9, 0x4, 0x5, 0xe6, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x84, 0xcf40, 0x98, 0x8001, 0x80, 0x20]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x6, 0x48, 0x36, 0x9, 0x18, 0x4, 0x60, 0x30, 0x36, 0x28, 0x2c, 0xc, 0xc, 0xa, 0x5, 0x14, 0x60, 0x4, 0x6c, 0x48, 0x4, 0x30, 0x1b, 0x1b, 0x30, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x7}, {0x1}, {0x2, 0x5}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x6, 0x8}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36e, 0x2, 0x200, 0x3, 0x8, 0x5, 0x0, 0x20]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x48, 0x1b, 0x1, 0x4, 0x6, 0x6c, 0x7, 0xc, 0x48, 0x3, 0x36, 0x3, 0x6c, 0x36, 0x16, 0x9, 0x1b]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x97b7, 0xf806, 0xfff, 0x1000, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xf371, 0x4, 0x3d7, 0x1000, 0x40, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x5}, {0x1}, {0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xe32, 0xe290, 0x2, 0x7, 0x40, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x1, 0x66, 0x5, 0x9a8, 0x3f, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xabc, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc92, 0x2, 0x4, 0x2, 0x200, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x2}, {0x1}, {0x7, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x6}, {}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0xf}, {0x7, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x6}, {0x4}, {0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1f}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x0, 0x400, 0x2, 0x20, 0x401, 0x807c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe24, 0xff, 0x9, 0xfff, 0xab, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7fff, 0x100, 0x7ff, 0x2, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x32, 0x1b, 0x1b, 0x3, 0x6, 0x16, 0x12, 0xc, 0x48, 0x24, 0xc, 0xc, 0x12, 0x24, 0x36, 0x17, 0x5, 0x24, 0x5, 0x4, 0x12, 0xc, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3f, 0x8, 0x4, 0x20, 0x49, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x57, 0x31, 0x30, 0x2, 0x57, 0x48, 0x4, 0xb, 0x0, 0x60, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x18, 0x60, 0x9, 0x4, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x80}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f40, 0x2, 0xfff7, 0x5, 0xfc16, 0x9, 0x3, 0xc505]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}]}, {0x4c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x484, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0xd}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {0x2, 0x6}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x1b}, {0x4, 0x3}, {0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x81, 0x6, 0x9, 0x20, 0x8, 0x7ff, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x3}, {0x2}, {0x5, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {}, {0x6, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2195, 0xfffd, 0x80, 0x8, 0x3, 0xb5, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7f, 0x4e, 0xfcc, 0x3f, 0x9, 0x1000, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf45, 0x97, 0x7, 0x7f, 0x200, 0x7, 0xc64d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xc9d7, 0x5, 0x3, 0x80, 0x6, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8, 0x2, 0x7, 0x1ff, 0x1, 0x800, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0x7ff, 0x5, 0x3f, 0x8000, 0x1, 0x774]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0xfff, 0x6, 0x8, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0x4, 0x8000, 0xdd, 0x7, 0xd1a8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x6}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x1}, {0x4, 0x2}, {0x4}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x3, 0x30, 0x4, 0xb, 0x4, 0x5, 0x4, 0x16, 0x1, 0x60, 0x48, 0x24, 0x6, 0x6, 0x2a80788b739b30f1, 0x18, 0x60, 0x16, 0x60, 0x7a, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x6, 0x7fff, 0x9, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x16, 0x48, 0x60, 0x9, 0x60, 0x6, 0x1, 0x1, 0x6c, 0x24, 0x16, 0x30, 0x15, 0x30, 0x16]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3e, 0x60, 0x6, 0x16, 0x2, 0x9, 0x12, 0x1, 0x12, 0x18, 0x4, 0x4, 0x60, 0x1b, 0x4, 0xb, 0x6c, 0x12, 0x4, 0x16, 0x24, 0x60, 0x6, 0x9, 0xb, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7a9a, 0xa3, 0x1ff, 0x703, 0x40, 0x0, 0x20]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x2, 0x36, 0x61, 0x6c, 0x16, 0x20, 0x3, 0x2, 0x36, 0x4, 0x0, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x7, 0x2, 0xa, 0x1, 0xa5, 0x7f, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x5, 0x2, 0x400, 0x2c, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xa647, 0x1, 0x3f, 0x8, 0x1f, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xf0f, 0x400, 0xffff, 0x3, 0x8, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1f, 0x3, 0x3, 0x4, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x40, 0x7ff, 0x5, 0x8, 0x3, 0x101, 0x7]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x6}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x2}, {0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x24, 0x24, 0x12, 0x0, 0x36, 0x48, 0x36, 0x5, 0x18, 0x16, 0x24, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0x4, 0x40, 0xfffd, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x97, 0xffff, 0x1, 0xf2a9, 0x86b, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x18}, {0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf73, 0x2000, 0x7, 0x9, 0x5, 0x7fff, 0xe8ac, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x16, 0x9, 0x6, 0x30, 0x12, 0x1, 0x3, 0x60, 0x0, 0x4, 0x3f, 0x24, 0x36, 0x0, 0x18, 0x3, 0x0, 0x48, 0x2, 0x48, 0x1, 0xc, 0x42, 0x18, 0x3, 0x12, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x401, 0x1ff, 0x800, 0x12, 0x81, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0xfb, 0x401, 0x7fff, 0x7, 0x40]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffbff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf43f, 0x0, 0x3ff, 0x8c2, 0x2, 0xbb, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x7e3b, 0x8, 0x5, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4211, 0x0, 0x6, 0x33d5, 0x8, 0x6, 0x800, 0xf32]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea74, 0xc5d, 0x81, 0x5, 0x9, 0x8001, 0x1309, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0x8, 0x800, 0x2, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3ff, 0x2, 0x6, 0x4, 0x3, 0xfff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4ff0df32ec0e043b, 0xb, 0x12, 0x4]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x800, 0x8, 0x1, 0xc4, 0xdb, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7, 0xfffa, 0x1f, 0x4, 0xfffd, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8, 0x44b6, 0x1f, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x5, 0x9, 0x2, 0xa9ce, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ca4, 0x800, 0x0, 0x8, 0x8001, 0x8001, 0x4, 0x200]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x18, 0x5, 0x11, 0x6, 0x18, 0x36, 0xb, 0x48, 0x16, 0x60, 0x6c, 0x4, 0x1, 0x4, 0x2, 0x1b, 0x18, 0x30, 0x9, 0x60, 0xc, 0x9, 0x1, 0x24, 0x1b, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x3}, {0x1}, {0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x32c, 0x0, 0x8, 0x4, 0x9, 0x6, 0x9, 0xfff]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x18, 0x9, 0x16, 0x30, 0x6c, 0x4, 0x0, 0x18, 0x6, 0x36, 0xb, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfffb, 0x6, 0x7fff, 0x9, 0x258, 0x8, 0x5]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x28, 0x3, 0x2, 0x5, 0x4, 0x3, 0xc, 0x24, 0x60, 0xc, 0x5, 0x48, 0xc, 0x2, 0x12, 0x4, 0x36, 0x12, 0xc, 0x30, 0x60, 0x2, 0x60, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x4, 0x9}, {0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x6}, {0x1, 0x2}, {0x7, 0x2}, {0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x17}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {}, {0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d0, 0x8ad1, 0x6e00, 0xd060, 0x5, 0x3, 0x3ff, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xe7, 0x921e, 0x1712, 0x5, 0x20, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x36, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfeff, 0x8, 0x0, 0x4, 0x0, 0xe37a, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf912, 0x1, 0x4, 0x3ff, 0x0, 0x7ff, 0x8, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x12, 0x24, 0x6c, 0x3, 0x0, 0x2, 0x24, 0x1, 0x24, 0x2, 0x3, 0x1, 0x1b, 0x48, 0x1, 0x3, 0x1, 0x60, 0x9, 0x6c, 0x48, 0x60, 0x3, 0x30, 0x18, 0x6, 0x60, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x40, 0x1, 0x9, 0x9, 0x0, 0xfff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x0, 0x188e, 0x9c2, 0x100, 0x0, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x3}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0xaf, 0x6, 0x1, 0x7, 0x3f, 0xffe0, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x8}, {}, {0x2, 0x6}, {0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1, 0x999, 0x8000, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x5}, {0x5, 0x6}, {0x0, 0xa}, {}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xd6, 0x97f, 0x7fff, 0x3800, 0x40, 0x0, 0x1f3b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfffa, 0x1ff, 0x3, 0x1, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x7}, {0x2}, {0x3, 0x3}, {0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000075) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0x5452, r0) 17:38:09 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:09 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc0000}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0x81, &(0x7f0000000140)=""/129, 0x41100, 0x30, '\x00', 0x0, 0x5, r0, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) 17:38:09 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x8000, 0x40, 0x1, 0x8008000, '\x00', 0x0, r0, 0x1, 0x4, 0x0, 0x7}, 0x48) 17:38:09 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x16c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c051) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socketpair(0x23, 0x2, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000340)=0xff) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140a, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2f497da4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x16d}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) 17:38:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1b9d}, 0x4) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x8000, 0x40, 0x1, 0x8008000, '\x00', 0x0, r0, 0x1, 0x4, 0x0, 0x7}, 0x48) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1b9d}, 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x16c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c051) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socketpair(0x23, 0x2, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000340)=0xff) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140a, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2f497da4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x16d}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1b9d}, 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="c133ce0f1ad65da110db400fe43086a7700f5ef398eeef9ddddb560fa79bf9f1e67046c9fd22b276a4b01edb4f3bf92194b375708ddfed17d7a4f71463397fffe948859ab115095e519cc7b95efd0bf8f6f0646224aa5c2f925c04c330ffdd8ca1cce6e0053673992ce19f791209267ed04b108f683b563bd66d5a1565bf9d1668cb7ed3165d103599e8eba63212450f522ca398c67f2200f01df4d7d9c28581f2f5f4d97fe8886c49075d45a44724e1947f635369cb20920ddfa8", &(0x7f00000000c0)=""/34, &(0x7f0000000100)="6e61163e0311883552a54003a6a54fe30722c4dac6739e33750a1ea5305d78ce2ef4360328e26dba3035ca295abbfb1ff6a2e5a76e854eeb21c6e04fdc948d469ba7bcf67ac6d62a234537a93c70f2c1ceaba0d89c690ad86b9cc86ba492102fed220c1016492f06b7b23382ce369dcb988979def1cac65d2625b2b30463bf1a20554703a283aed34b9c7295cb45b01cb855860739d86ba3224e99a373c25502180a4a10b14ba676b3cf9210d5", &(0x7f00000001c0)="eceec386c126e0c37c843ba62c5f414aae8190a978aff22bfee7e2b2c6002c34a89f575a28d9800cedffec9fff51a5ccad0c73e1039c977c927fc2c73e8c693fc0800ca206e4921cd306c3b4d407f34d820508a68cd0563fcccc2a96473a6addfb6a691f7d9de12ebd7fb8fee1f5c79d6de9e12f116bc020420d654f", 0xbfe0, r0, 0x4}, 0x38) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x16c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c051) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) socketpair(0x23, 0x2, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000340)=0xff) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140a, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2f497da4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x16d}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="c133ce0f1ad65da110db400fe43086a7700f5ef398eeef9ddddb560fa79bf9f1e67046c9fd22b276a4b01edb4f3bf92194b375708ddfed17d7a4f71463397fffe948859ab115095e519cc7b95efd0bf8f6f0646224aa5c2f925c04c330ffdd8ca1cce6e0053673992ce19f791209267ed04b108f683b563bd66d5a1565bf9d1668cb7ed3165d103599e8eba63212450f522ca398c67f2200f01df4d7d9c28581f2f5f4d97fe8886c49075d45a44724e1947f635369cb20920ddfa8", &(0x7f00000000c0)=""/34, &(0x7f0000000100)="6e61163e0311883552a54003a6a54fe30722c4dac6739e33750a1ea5305d78ce2ef4360328e26dba3035ca295abbfb1ff6a2e5a76e854eeb21c6e04fdc948d469ba7bcf67ac6d62a234537a93c70f2c1ceaba0d89c690ad86b9cc86ba492102fed220c1016492f06b7b23382ce369dcb988979def1cac65d2625b2b30463bf1a20554703a283aed34b9c7295cb45b01cb855860739d86ba3224e99a373c25502180a4a10b14ba676b3cf9210d5", &(0x7f00000001c0)="eceec386c126e0c37c843ba62c5f414aae8190a978aff22bfee7e2b2c6002c34a89f575a28d9800cedffec9fff51a5ccad0c73e1039c977c927fc2c73e8c693fc0800ca206e4921cd306c3b4d407f34d820508a68cd0563fcccc2a96473a6addfb6a691f7d9de12ebd7fb8fee1f5c79d6de9e12f116bc020420d654f", 0xbfe0, r0, 0x4}, 0x38) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 17:38:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="c133ce0f1ad65da110db400fe43086a7700f5ef398eeef9ddddb560fa79bf9f1e67046c9fd22b276a4b01edb4f3bf92194b375708ddfed17d7a4f71463397fffe948859ab115095e519cc7b95efd0bf8f6f0646224aa5c2f925c04c330ffdd8ca1cce6e0053673992ce19f791209267ed04b108f683b563bd66d5a1565bf9d1668cb7ed3165d103599e8eba63212450f522ca398c67f2200f01df4d7d9c28581f2f5f4d97fe8886c49075d45a44724e1947f635369cb20920ddfa8", &(0x7f00000000c0)=""/34, &(0x7f0000000100)="6e61163e0311883552a54003a6a54fe30722c4dac6739e33750a1ea5305d78ce2ef4360328e26dba3035ca295abbfb1ff6a2e5a76e854eeb21c6e04fdc948d469ba7bcf67ac6d62a234537a93c70f2c1ceaba0d89c690ad86b9cc86ba492102fed220c1016492f06b7b23382ce369dcb988979def1cac65d2625b2b30463bf1a20554703a283aed34b9c7295cb45b01cb855860739d86ba3224e99a373c25502180a4a10b14ba676b3cf9210d5", &(0x7f00000001c0)="eceec386c126e0c37c843ba62c5f414aae8190a978aff22bfee7e2b2c6002c34a89f575a28d9800cedffec9fff51a5ccad0c73e1039c977c927fc2c73e8c693fc0800ca206e4921cd306c3b4d407f34d820508a68cd0563fcccc2a96473a6addfb6a691f7d9de12ebd7fb8fee1f5c79d6de9e12f116bc020420d654f", 0xbfe0, r0, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="c133ce0f1ad65da110db400fe43086a7700f5ef398eeef9ddddb560fa79bf9f1e67046c9fd22b276a4b01edb4f3bf92194b375708ddfed17d7a4f71463397fffe948859ab115095e519cc7b95efd0bf8f6f0646224aa5c2f925c04c330ffdd8ca1cce6e0053673992ce19f791209267ed04b108f683b563bd66d5a1565bf9d1668cb7ed3165d103599e8eba63212450f522ca398c67f2200f01df4d7d9c28581f2f5f4d97fe8886c49075d45a44724e1947f635369cb20920ddfa8", &(0x7f00000000c0)=""/34, &(0x7f0000000100)="6e61163e0311883552a54003a6a54fe30722c4dac6739e33750a1ea5305d78ce2ef4360328e26dba3035ca295abbfb1ff6a2e5a76e854eeb21c6e04fdc948d469ba7bcf67ac6d62a234537a93c70f2c1ceaba0d89c690ad86b9cc86ba492102fed220c1016492f06b7b23382ce369dcb988979def1cac65d2625b2b30463bf1a20554703a283aed34b9c7295cb45b01cb855860739d86ba3224e99a373c25502180a4a10b14ba676b3cf9210d5", &(0x7f00000001c0)="eceec386c126e0c37c843ba62c5f414aae8190a978aff22bfee7e2b2c6002c34a89f575a28d9800cedffec9fff51a5ccad0c73e1039c977c927fc2c73e8c693fc0800ca206e4921cd306c3b4d407f34d820508a68cd0563fcccc2a96473a6addfb6a691f7d9de12ebd7fb8fee1f5c79d6de9e12f116bc020420d654f", 0xbfe0, r0, 0x4}, 0x38) (async) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0e0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5a4, 0x1, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3}, 0x48) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 0: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5a4, 0x1, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3}, 0x48) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5a4, 0x1, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3}, 0x48) (async) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',H\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x105400) socket$inet_udplite(0x2, 0x2, 0x88) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:10 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0e0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) 17:38:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5a4, 0x1, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x3}, 0x48) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0600, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x8000, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x78}}, 0x4000000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x105400) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',`\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x19}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:10 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',H\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0600, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x8000, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x78}}, 0x4000000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x105400) socket$inet_udplite(0x2, 0x2, 0x88) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x19}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x19}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) 17:38:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1b9d}, 0x4) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0600, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x8000, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x78}}, 0x4000000) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="cbfed1fdeb7d1303a9b7984664de35fbee3c13e33ba093b7c5225ac684cbf96db178cdac2acb7cac17e0a149f03d0b64b5378404bfd2369666e9d56fe8be5ebd6a2c299d2da669a59a19000000000000", &(0x7f0000000080)=""/3, &(0x7f0000000100)="8b5f259c15e388e0f85c6c404b412f1de8c719bc0e6dbd16cdd833b752251b3fda259147f4a3c5b88c85e89e0083f8a2cd509d235322e33ff3de9d209fb550cc164220d01ba84848", &(0x7f0000000240)="6cc7803a434b2f48df97c905e0b3b299a7df098445ec15676e54b6e30f32f08eac73908940a1b02d59c1c34875b37530bcc2d384522a68d12a1834fcc38a2be4bb12f57086733d3bd695bb09aac8742e04d65ec06a0982580a35e783133e60e981a1d4d081a35e7c3ddf08", 0xfffffff7, 0x1, 0x4}, 0x38) 17:38:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',`\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',l\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',`\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x19}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (rerun: 64) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="cbfed1fdeb7d1303a9b7984664de35fbee3c13e33ba093b7c5225ac684cbf96db178cdac2acb7cac17e0a149f03d0b64b5378404bfd2369666e9d56fe8be5ebd6a2c299d2da669a59a19000000000000", &(0x7f0000000080)=""/3, &(0x7f0000000100)="8b5f259c15e388e0f85c6c404b412f1de8c719bc0e6dbd16cdd833b752251b3fda259147f4a3c5b88c85e89e0083f8a2cd509d235322e33ff3de9d209fb550cc164220d01ba84848", &(0x7f0000000240)="6cc7803a434b2f48df97c905e0b3b299a7df098445ec15676e54b6e30f32f08eac73908940a1b02d59c1c34875b37530bcc2d384522a68d12a1834fcc38a2be4bb12f57086733d3bd695bb09aac8742e04d65ec06a0982580a35e783133e60e981a1d4d081a35e7c3ddf08", 0xfffffff7, 0x1, 0x4}, 0x38) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="cbfed1fdeb7d1303a9b7984664de35fbee3c13e33ba093b7c5225ac684cbf96db178cdac2acb7cac17e0a149f03d0b64b5378404bfd2369666e9d56fe8be5ebd6a2c299d2da669a59a19000000000000", &(0x7f0000000080)=""/3, &(0x7f0000000100)="8b5f259c15e388e0f85c6c404b412f1de8c719bc0e6dbd16cdd833b752251b3fda259147f4a3c5b88c85e89e0083f8a2cd509d235322e33ff3de9d209fb550cc164220d01ba84848", &(0x7f0000000240)="6cc7803a434b2f48df97c905e0b3b299a7df098445ec15676e54b6e30f32f08eac73908940a1b02d59c1c34875b37530bcc2d384522a68d12a1834fcc38a2be4bb12f57086733d3bd695bb09aac8742e04d65ec06a0982580a35e783133e60e981a1d4d081a35e7c3ddf08", 0xfffffff7, 0x1, 0x4}, 0x38) (async) 17:38:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1db501, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="13e37417d048342cd1c4b35027e6ce9d", 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@generic={0x40, 0x6, 0x4, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x401, 0xea, &(0x7f0000000080)=""/234, 0x40e00, 0x6, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xfbe9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, r0, r4, r0, r0]}, 0x80) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1db501, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1db501, 0x0) (async) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:11 executing program 4: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1db501, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="cbfed1fdeb7d1303a9b7984664de35fbee3c13e33ba093b7c5225ac684cbf96db178cdac2acb7cac17e0a149f03d0b64b5378404bfd2369666e9d56fe8be5ebd6a2c299d2da669a59a19000000000000", &(0x7f0000000080)=""/3, &(0x7f0000000100)="8b5f259c15e388e0f85c6c404b412f1de8c719bc0e6dbd16cdd833b752251b3fda259147f4a3c5b88c85e89e0083f8a2cd509d235322e33ff3de9d209fb550cc164220d01ba84848", &(0x7f0000000240)="6cc7803a434b2f48df97c905e0b3b299a7df098445ec15676e54b6e30f32f08eac73908940a1b02d59c1c34875b37530bcc2d384522a68d12a1834fcc38a2be4bb12f57086733d3bd695bb09aac8742e04d65ec06a0982580a35e783133e60e981a1d4d081a35e7c3ddf08", 0xfffffff7, 0x1, 0x4}, 0x38) 17:38:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="13e37417d048342cd1c4b35027e6ce9d", 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@generic={0x40, 0x6, 0x4, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x401, 0xea, &(0x7f0000000080)=""/234, 0x40e00, 0x6, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xfbe9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, r0, r4, r0, r0]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="13e37417d048342cd1c4b35027e6ce9d", 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@generic={0x40, 0x6, 0x4, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x401, 0xea, &(0x7f0000000080)=""/234, 0x40e00, 0x6, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xfbe9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, r0, r4, r0, r0]}, 0x80) (async) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',l\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x91fa8a5734815eea) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, r3) 17:38:11 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1db501, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:11 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000340)="13e37417d048342cd1c4b35027e6ce9d", 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@generic={0x40, 0x6, 0x4, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x401, 0xea, &(0x7f0000000080)=""/234, 0x40e00, 0x6, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xfbe9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, r0, r4, r0, r0]}, 0x80) 17:38:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x91fa8a5734815eea) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, r3) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, r3) 17:38:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000000)="34d7642d0eb5440a4caabd", 0xb) 17:38:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x109341) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/193, &(0x7f0000000000)=0xc1) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x1411, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x7f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="53328dba66db"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x8, 0x1, 0x5b0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000000)="34d7642d0eb5440a4caabd", 0xb) 17:38:11 executing program 0: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x91fa8a5734815eea) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, r3) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x1411, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x7f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="53328dba66db"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x8, 0x1, 0x5b0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002012}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x0, 0x304, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcbe}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x40020000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000000)="34d7642d0eb5440a4caabd", 0xb) 17:38:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x1411, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x7f}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="53328dba66db"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x8, 0x1, 0x5b0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) 17:38:11 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002012}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x0, 0x304, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcbe}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x40020000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:38:11 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002012}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x0, 0x304, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcbe}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x40020000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:38:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0xfffffffa, 0x9, 0x1004, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xb, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], &(0x7f0000000040)='GPL\x00', 0x8000, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x7, 0xf6}, 0x10, 0x25adb, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r1, r2, r3, r0, r0]}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xb8f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="6715402004000000"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x2, &(0x7f0000000280)=""/2, 0x1e00, 0x28, '\x00', r5, 0x1b, r7, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0x1ff, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[r6, r9, 0xffffffffffffffff, r8]}, 0x80) 17:38:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002012}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x90, 0x0, 0x304, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcbe}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4050}, 0x40020000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:38:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0xfffffffa, 0x9, 0x1004, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xb, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], &(0x7f0000000040)='GPL\x00', 0x8000, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x7, 0xf6}, 0x10, 0x25adb, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r1, r2, r3, r0, r0]}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async, rerun: 32) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xb8f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="6715402004000000"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x2, &(0x7f0000000280)=""/2, 0x1e00, 0x28, '\x00', r5, 0x1b, r7, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0x1ff, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[r6, r9, 0xffffffffffffffff, r8]}, 0x80) 17:38:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0xfffffffa, 0x9, 0x1004, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xb, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], &(0x7f0000000040)='GPL\x00', 0x8000, 0x8e, &(0x7f0000000140)=""/142, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x7, 0xf6}, 0x10, 0x25adb, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r1, r2, r3, r0, r0]}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xb8f}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="6715402004000000"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x2, &(0x7f0000000280)=""/2, 0x1e00, 0x28, '\x00', r5, 0x1b, r7, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xe, 0x1ff, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[r6, r9, 0xffffffffffffffff, r8]}, 0x80) 17:38:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000e00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000e00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 17:38:12 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x945c0000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x310, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x1}, 0x200440c9) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) [ 1262.358776] validate_nla: 35 callbacks suppressed [ 1262.358789] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:38:12 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x945c0000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00H\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x310, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x1}, 0x200440c9) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00H\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00L\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1262.516948] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:38:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x310, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x1}, 0x200440c9) 17:38:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00L\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c975b00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c945c00", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x601}, "a9f1518baeb1b05c", "1454dbc0fe25a8fdc11a13b7dcc2b3e9a056fc55c63f722dd70ee9c09fa1306b", "ce40010e", "7c0b1fce1860e445"}, 0x38) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00`\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00`\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x251dc51b7e81a351, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x860) 17:38:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00h\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf253000000008000300", @ANYRES16=r3, @ANYBLOB="0600360026000000060036003e000000060036001e00000006003600120000000600360034000000060036003c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) 17:38:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00h\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00l\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x251dc51b7e81a351, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x860) 17:38:13 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1d, 0x4, 0x2, 0x401, 0x10, r2, 0x3, '\x00', r1, r0, 0x4, 0x1, 0x3}, 0x48) 17:38:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf253000000008000300", @ANYRES16=r3, @ANYBLOB="0600360026000000060036003e000000060036001e00000006003600120000000600360034000000060036003c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) 17:38:13 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x251dc51b7e81a351, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x860) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00t\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00l\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf253000000008000300", @ANYRES16=r3, @ANYBLOB="0600360026000000060036003e000000060036001e00000006003600120000000600360034000000060036003c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf253000000008000300", @ANYRES16=r3, @ANYBLOB="0600360026000000060036003e000000060036001e00000006003600120000000600360034000000060036003c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) (async) 17:38:13 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1d, 0x4, 0x2, 0x401, 0x10, r2, 0x3, '\x00', r1, r0, 0x4, 0x1, 0x3}, 0x48) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00z\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00t\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1d, 0x4, 0x2, 0x401, 0x10, r2, 0x3, '\x00', r1, r0, 0x4, 0x1, 0x3}, 0x48) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async, rerun: 32) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (rerun: 32) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c5b9700", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 4: perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00z\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x76}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x10001, 0x43, &(0x7f0000000080)=""/67, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000180)=[r2, r3]}, 0x80) 17:38:13 executing program 4: perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c5c9400", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x76}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x10001, 0x43, &(0x7f0000000080)=""/67, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000180)=[r2, r3]}, 0x80) 17:38:13 executing program 4: perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x886000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x76}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x10001, 0x43, &(0x7f0000000080)=""/67, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000180)=[r2, r3]}, 0x80) 17:38:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x886000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x5, 0x9, 0x330, r2, 0x58, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x30800, 0x0) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r13, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x5, 0x0, 0x1, 0x18, 0xfffffffffffffff0}, @exit, @generic={0x1f, 0x9, 0x0, 0xa4d, 0x7d}], &(0x7f0000000040)='GPL\x00', 0x1, 0x9b, &(0x7f00000000c0)=""/155, 0x41100, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x383f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, r8, r2, 0xffffffffffffffff, r9, r10, r11, r12, r5, r13]}, 0x80) 17:38:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x4c, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8400) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x886000) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x5, 0x9, 0x330, r2, 0x58, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, 0x0) (async) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x30800, 0x0) (async) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r13, 0x894b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x5, 0x0, 0x1, 0x18, 0xfffffffffffffff0}, @exit, @generic={0x1f, 0x9, 0x0, 0xa4d, 0x7d}], &(0x7f0000000040)='GPL\x00', 0x1, 0x9b, &(0x7f00000000c0)=""/155, 0x41100, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x383f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, r8, r2, 0xffffffffffffffff, r9, r10, r11, r12, r5, r13]}, 0x80) 17:38:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:13 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:13 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101840) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303000) 17:38:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408100) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x5, 0x9, 0x330, r2, 0x58, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, 0x0) (async) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, 0x0) (async) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x30800, 0x0) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r13, 0x894b, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x5, 0x0, 0x1, 0x18, 0xfffffffffffffff0}, @exit, @generic={0x1f, 0x9, 0x0, 0xa4d, 0x7d}], &(0x7f0000000040)='GPL\x00', 0x1, 0x9b, &(0x7f00000000c0)=""/155, 0x41100, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x2, 0x383f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r7, r8, r2, 0xffffffffffffffff, r9, r10, r11, r12, r5, r13]}, 0x80) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101840) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101840) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303000) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408100) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408100) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101840) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x303000) 17:38:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x7, 0xffff, 0x108, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xf}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x37, 0x7, 0x22, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xa}, 0x48) [ 1264.038700] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408100) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408100) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) [ 1264.089380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x7, 0xffff, 0x108, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xf}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x37, 0x7, 0x22, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xa}, 0x48) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1264.174982] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1264.193566] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r5}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040091}, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0x5421, 0xffffffffffffffff) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x7, 0xffff, 0x108, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xf}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x7, 0xffff, 0x108, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xf}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0x37, 0x7, 0x22, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xa}, 0x48) 17:38:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r5}, 0x48) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040091}, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0x5421, 0xffffffffffffffff) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1264.322871] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1264.356076] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) 17:38:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x125000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xbb, 0xe6, 0x1, 0x450, r2, 0x4, '\x00', 0x0, r4, 0x1, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 17:38:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r5}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040091}, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0x5421, 0xffffffffffffffff) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1264.462927] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1264.497953] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:38:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x125000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xbb, 0xe6, 0x1, 0x450, r2, 0x4, '\x00', 0x0, r4, 0x1, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="f467d4a4e9136d95edc609822c291e3bc44c0553480c06a8deff977966b3a135a39cd665b66ef1b802940a421b880afa1e625f660ea688388a597fdca0dddd3d614b2115e17ebd3595b1ebecd7578b5bc112118d31f443cb55cbbf9b274c157d82d7fde333fdc89b7c376394c1a73a7e2a81f0d3dc285532b251c307c6c4baeffdad67ea5a81a6dd5485e2ab9d4c23ab9b2a9c014925cfabbc85c836b8169051f57b12614dcf99ce0da6333a33fa5b8d0f131ef9217f54f24a788b59701a4a435968eb584fee01d0f074663255a2305dd54a7ac652c1b0e516fe8abd74c5e8d46c4ebf4540aafe4a4c26f242718d61a991f24c35b2", &(0x7f0000000000)=""/138, 0x4}, 0x20) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4010084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&{-'}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x125000, 0x0) (rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xbb, 0xe6, 0x1, 0x450, r2, 0x4, '\x00', 0x0, r4, 0x1, 0x2, 0x4, 0x5}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) (rerun: 32) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="f467d4a4e9136d95edc609822c291e3bc44c0553480c06a8deff977966b3a135a39cd665b66ef1b802940a421b880afa1e625f660ea688388a597fdca0dddd3d614b2115e17ebd3595b1ebecd7578b5bc112118d31f443cb55cbbf9b274c157d82d7fde333fdc89b7c376394c1a73a7e2a81f0d3dc285532b251c307c6c4baeffdad67ea5a81a6dd5485e2ab9d4c23ab9b2a9c014925cfabbc85c836b8169051f57b12614dcf99ce0da6333a33fa5b8d0f131ef9217f54f24a788b59701a4a435968eb584fee01d0f074663255a2305dd54a7ac652c1b0e516fe8abd74c5e8d46c4ebf4540aafe4a4c26f242718d61a991f24c35b2", &(0x7f0000000000)=""/138, 0x4}, 0x20) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4010084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&{-'}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="f467d4a4e9136d95edc609822c291e3bc44c0553480c06a8deff977966b3a135a39cd665b66ef1b802940a421b880afa1e625f660ea688388a597fdca0dddd3d614b2115e17ebd3595b1ebecd7578b5bc112118d31f443cb55cbbf9b274c157d82d7fde333fdc89b7c376394c1a73a7e2a81f0d3dc285532b251c307c6c4baeffdad67ea5a81a6dd5485e2ab9d4c23ab9b2a9c014925cfabbc85c836b8169051f57b12614dcf99ce0da6333a33fa5b8d0f131ef9217f54f24a788b59701a4a435968eb584fee01d0f074663255a2305dd54a7ac652c1b0e516fe8abd74c5e8d46c4ebf4540aafe4a4c26f242718d61a991f24c35b2", &(0x7f0000000000)=""/138, 0x4}, 0x20) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="f467d4a4e9136d95edc609822c291e3bc44c0553480c06a8deff977966b3a135a39cd665b66ef1b802940a421b880afa1e625f660ea688388a597fdca0dddd3d614b2115e17ebd3595b1ebecd7578b5bc112118d31f443cb55cbbf9b274c157d82d7fde333fdc89b7c376394c1a73a7e2a81f0d3dc285532b251c307c6c4baeffdad67ea5a81a6dd5485e2ab9d4c23ab9b2a9c014925cfabbc85c836b8169051f57b12614dcf99ce0da6333a33fa5b8d0f131ef9217f54f24a788b59701a4a435968eb584fee01d0f074663255a2305dd54a7ac652c1b0e516fe8abd74c5e8d46c4ebf4540aafe4a4c26f242718d61a991f24c35b2", &(0x7f0000000000)=""/138, 0x4}, 0x20) (async) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) socketpair(0x2b, 0x3, 0x37, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fbdbdf2502000000180001801400020065727370616e300000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003009ce6e9430800030003010000000003000200000008000300000000000800030002000000a0b81685d8c81ef0078f36ffc205269a224fce0f00b201ca43d50a9718ac9c863b4f2aae501f482e769ccf0717542ebbba5c24604f04843fad22126a574e8f0ae7f06f1a0f2baa07e7e895718250c6a7f39a985bba0cb10212d993e99271c672447d286329235b140abbda196eaca1ae935b2c6323b56fe840110a12c164e52bc6a2f5c57ae659962f74386980d1df459b429b55"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4010084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&{-'}]}, 0x40}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:38:14 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fbdbdf2502000000180001801400020065727370616e300000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003009ce6e9430800030003010000000003000200000008000300000000000800030002000000a0b81685d8c81ef0078f36ffc205269a224fce0f00b201ca43d50a9718ac9c863b4f2aae501f482e769ccf0717542ebbba5c24604f04843fad22126a574e8f0ae7f06f1a0f2baa07e7e895718250c6a7f39a985bba0cb10212d993e99271c672447d286329235b140abbda196eaca1ae935b2c6323b56fe840110a12c164e52bc6a2f5c57ae659962f74386980d1df459b429b55"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) socketpair(0x2b, 0x3, 0x37, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) socketpair(0x2b, 0x3, 0x37, &(0x7f0000000000)) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200d00) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fbdbdf2502000000180001801400020065727370616e300000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003009ce6e9430800030003010000000003000200000008000300000000000800030002000000a0b81685d8c81ef0078f36ffc205269a224fce0f00b201ca43d50a9718ac9c863b4f2aae501f482e769ccf0717542ebbba5c24604f04843fad22126a574e8f0ae7f06f1a0f2baa07e7e895718250c6a7f39a985bba0cb10212d993e99271c672447d286329235b140abbda196eaca1ae935b2c6323b56fe840110a12c164e52bc6a2f5c57ae659962f74386980d1df459b429b55"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fbdbdf2502000000180001801400020065727370616e300000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003009ce6e9430800030003010000000003000200000008000300000000000800030002000000a0b81685d8c81ef0078f36ffc205269a224fce0f00b201ca43d50a9718ac9c863b4f2aae501f482e769ccf0717542ebbba5c24604f04843fad22126a574e8f0ae7f06f1a0f2baa07e7e895718250c6a7f39a985bba0cb10212d993e99271c672447d286329235b140abbda196eaca1ae935b2c6323b56fe840110a12c164e52bc6a2f5c57ae659962f74386980d1df459b429b55"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) socketpair(0x2b, 0x3, 0x37, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200d00) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200d00) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000000)="659f9dce6fb3693ff7edbba860fcbc4f48d6d5cb0009fddfabc5bf1f5ed21b110ca57f993881a6eb7cd74fccb8518a39eb5facf73156e244a4c23dfe1a2e4c1dc967d246f707a12e079fc1686cc37ee6cb11f5d87f3795469ee624031cd8a0c456c8ed81cec7ed2e", 0x68) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200d00) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200d00) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 1: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:15 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000000)="659f9dce6fb3693ff7edbba860fcbc4f48d6d5cb0009fddfabc5bf1f5ed21b110ca57f993881a6eb7cd74fccb8518a39eb5facf73156e244a4c23dfe1a2e4c1dc967d246f707a12e079fc1686cc37ee6cb11f5d87f3795469ee624031cd8a0c456c8ed81cec7ed2e", 0x68) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 1: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async) 17:38:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000000)="659f9dce6fb3693ff7edbba860fcbc4f48d6d5cb0009fddfabc5bf1f5ed21b110ca57f993881a6eb7cd74fccb8518a39eb5facf73156e244a4c23dfe1a2e4c1dc967d246f707a12e079fc1686cc37ee6cb11f5d87f3795469ee624031cd8a0c456c8ed81cec7ed2e", 0x68) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) 17:38:15 executing program 1: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40802) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async) 17:38:15 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40802) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40c000) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40802) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40c000) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40c000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 1: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40c000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&8#'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '%'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:15 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00[', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x6, 0x5, 0x5, 0x1600, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r1, 0x11, 0x3}, 0x14) 17:38:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SOCK(r1, 0x5452, 0xffffffffffffffff) 17:38:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&8#'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '%'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x6, 0x5, 0x5, 0x1600, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) (async) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r1, 0x11, 0x3}, 0x14) (rerun: 32) 17:38:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&8#'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '%'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x23, &(0x7f0000000380)=""/35, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x94c4, 0x7}, 0x10}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0xeee8, 0x2, 0x40, 0x1, 0xb5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xd, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @jmp={0x5, 0x1, 0x0, 0x9, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xf3, &(0x7f0000000140)=""/243, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xf, 0x56, 0x7fffffff}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff]}, 0x80) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\\', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x23, &(0x7f0000000380)=""/35, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x94c4, 0x7}, 0x10}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0xeee8, 0x2, 0x40, 0x1, 0xb5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xd, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @jmp={0x5, 0x1, 0x0, 0x9, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xf3, &(0x7f0000000140)=""/243, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xf, 0x56, 0x7fffffff}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff]}, 0x80) 17:38:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xb71, 0x0, 0x5, 0x128, r0, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x9}, 0x48) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x18}, 0xc) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x6, 0x5, 0x5, 0x1600, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) (async) openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r1, 0x11, 0x3}, 0x14) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x23, &(0x7f0000000380)=""/35, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x94c4, 0x7}, 0x10}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5, 0xeee8, 0x2, 0x40, 0x1, 0xb5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xd, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @jmp={0x5, 0x1, 0x0, 0x9, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xf3, &(0x7f0000000140)=""/243, 0x41100, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xf, 0x56, 0x7fffffff}, 0x10, 0x0, r3, 0x0, &(0x7f0000000540)=[r4, 0xffffffffffffffff]}, 0x80) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xb71, 0x0, 0x5, 0x128, r0, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x9}, 0x48) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff801, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101200) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0x0, 0x2}, 0x34) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xb71, 0x0, 0x5, 0x128, r0, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x9}, 0x48) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101200) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101200) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x1, 0x8, 0x101, 0x420, 0x1, 0x101, '\x00', r3, r4, 0x5, 0x3}, 0x48) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x408000) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101200) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101200) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) 17:38:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5421, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25010000000c00050020010000000000000c00040000100000200000000c000200050000000000000008000100000000000c00020001000000000000000c0005000400000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4048850) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x1, 0x8, 0x101, 0x420, 0x1, 0x101, '\x00', r3, r4, 0x5, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x1, 0x8, 0x101, 0x420, 0x1, 0x101, '\x00', r3, r4, 0x5, 0x3}, 0x48) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) 17:38:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000040001"], 0x2c}}, 0x0) [ 1266.703075] block nbd0: NBD_DISCONNECT [ 1266.735778] kasan: CONFIG_KASAN_INLINE enabled [ 1266.740375] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1266.747736] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1266.753963] CPU: 0 PID: 26770 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1266.761835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1266.771202] RIP: 0010:__lock_acquire+0x1eb/0x3ff0 [ 1266.776046] Code: 2b 29 00 00 48 81 c4 98 01 00 00 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 2a 00 00 49 81 3e 20 f2 66 8c 0f 84 65 ff ff [ 1266.794947] RSP: 0018:ffff888086cd7270 EFLAGS: 00010006 [ 1266.800308] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1266.807713] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000001 [ 1266.814996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1266.822262] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1266.829539] R13: ffff88808fd960c0 R14: 0000000000000110 R15: 0000000000000001 [ 1266.836814] FS: 00007f4a1d809700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1266.845045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.850923] CR2: 00007f14fa120263 CR3: 0000000095049000 CR4: 00000000003406f0 [ 1266.858193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1266.865454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1266.872711] Call Trace: [ 1266.875304] ? __lock_acquire+0x6de/0x3ff0 [ 1266.879548] ? mark_held_locks+0xf0/0xf0 [ 1266.883610] ? __lock_acquire+0x6de/0x3ff0 [ 1266.887850] ? mark_held_locks+0xf0/0xf0 [ 1266.891911] ? __free_object+0xdd/0x1e0 [ 1266.895889] ? mark_held_locks+0xf0/0xf0 [ 1266.899952] ? mark_held_locks+0xa6/0xf0 [ 1266.904012] lock_acquire+0x170/0x3c0 [ 1266.907810] ? flush_workqueue+0xe8/0x13e0 [ 1266.912045] flush_workqueue+0x117/0x13e0 [ 1266.916190] ? flush_workqueue+0xe8/0x13e0 [ 1266.920423] ? lock_downgrade+0x720/0x720 [ 1266.924569] ? hctx_unlock+0x83/0x140 [ 1266.928370] ? check_flush_dependency+0x400/0x400 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, &(0x7f0000000180)="52268d71dc449985d74a64dbadc59b953bbb2ecdb4cc129cceddb3c118c376e2f25d77341d9d970b83e2266be9bac65425e634727c67705baaf6e44c6c2cd556c8b386677e49da22c64c054f39ea77a7ee78770395711fef0b3b0b4465fca5b857117b2f", &(0x7f0000000200)=""/4096}, 0x20) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x8800) 17:38:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x1, 0x8, 0x101, 0x420, 0x1, 0x101, '\x00', r3, r4, 0x5, 0x3}, 0x48) 17:38:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x6, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, &(0x7f0000000180)="52268d71dc449985d74a64dbadc59b953bbb2ecdb4cc129cceddb3c118c376e2f25d77341d9d970b83e2266be9bac65425e634727c67705baaf6e44c6c2cd556c8b386677e49da22c64c054f39ea77a7ee78770395711fef0b3b0b4465fca5b857117b2f", &(0x7f0000000200)=""/4096}, 0x20) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x8800) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, &(0x7f0000000180)="52268d71dc449985d74a64dbadc59b953bbb2ecdb4cc129cceddb3c118c376e2f25d77341d9d970b83e2266be9bac65425e634727c67705baaf6e44c6c2cd556c8b386677e49da22c64c054f39ea77a7ee78770395711fef0b3b0b4465fca5b857117b2f", &(0x7f0000000200)=""/4096}, 0x20) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x8800) (async) 17:38:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, &(0x7f0000000180)="52268d71dc449985d74a64dbadc59b953bbb2ecdb4cc129cceddb3c118c376e2f25d77341d9d970b83e2266be9bac65425e634727c67705baaf6e44c6c2cd556c8b386677e49da22c64c054f39ea77a7ee78770395711fef0b3b0b4465fca5b857117b2f", &(0x7f0000000200)=""/4096}, 0x20) (async) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x8800) 17:38:16 executing program 2: [ 1266.933221] nbd_disconnect_and_put+0x100/0x190 [ 1266.937896] nbd_genl_disconnect+0x34f/0x4f0 [ 1266.942307] ? nbd_release+0x170/0x170 [ 1266.946194] ? nla_parse+0x1b2/0x290 [ 1266.949909] genl_family_rcv_msg+0x642/0xc40 [ 1266.954317] ? genl_rcv+0x40/0x40 [ 1266.957771] ? genl_rcv_msg+0x12f/0x160 [ 1266.961743] ? mutex_trylock+0x1a0/0x1a0 [ 1266.965806] ? __radix_tree_lookup+0x216/0x370 [ 1266.970394] genl_rcv_msg+0xbf/0x160 [ 1266.974107] netlink_rcv_skb+0x160/0x440 [ 1266.978167] ? genl_family_rcv_msg+0xc40/0xc40 [ 1266.982749] ? netlink_ack+0xae0/0xae0 sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000080)={0x2710, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0xd8, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x632f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a8, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x21}]}, {0x358, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x184, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x1700, 0xfffe, 0x401, 0x1000, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0xadd347330ef848fa, 0x16, 0xc3f5e9f63f789280, 0x3, 0x1, 0x6, 0x3, 0x9, 0x9, 0x48, 0x248c4ec93089ad67, 0x60, 0x8, 0x4, 0x6, 0x18, 0x2, 0x60, 0x24, 0x69, 0x1, 0x4, 0x12, 0x6, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x6, 0x6, 0x3, 0x1ff, 0x1, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf5, 0x6, 0x0, 0x401, 0xfffc, 0xfffc, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x6, 0x4, 0x5, 0x9, 0x5, 0x4]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x3, 0x80, 0x8aef, 0x7fff, 0x8000, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x3}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x2}, {0x0, 0x9}, {}, {0x3, 0x5}, {0x4, 0x6}, {0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xff, 0x49dc, 0x80, 0x6, 0x1000, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0xa0, 0xa26f, 0xfffa, 0x1d1, 0xa61, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1, 0x7f, 0xc66, 0x1, 0xfff, 0x1000]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x2, 0x1, 0x8, 0x8, 0x3f, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3, 0x4, 0x1, 0x1000, 0x3, 0x40, 0x7]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x1}, {0x6, 0x3}, {0x6, 0xa}, {}, {0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x1}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x4}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x1}, {0x2, 0x2}, {0x0, 0x5}, {0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x9}, {0x7, 0x9}, {0x6}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffc1, 0x7, 0x7ff, 0x4, 0x81, 0x6, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb5c, 0xc070, 0x8, 0x6, 0x6, 0x7, 0x20, 0x6c2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x20, 0x800, 0x5, 0x401, 0x2, 0xd0e, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe63c, 0x1000, 0x1, 0x401, 0x9, 0xc221, 0x400]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7f, 0x8, 0x4, 0x7, 0x4, 0x0, 0xfffb]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x3, 0x5}, {0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x27b9, 0x4, 0x3ff, 0xfff, 0x3, 0x6, 0x3]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4, 0x1, 0x5, 0x3f, 0x3, 0x82bb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0xb, 0x60, 0x1, 0x2, 0xe, 0x16, 0x9, 0x60, 0x16, 0x48, 0xb, 0x48, 0x48, 0x6c, 0xc, 0x70]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0xb]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x184, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x36, 0x6c, 0x16, 0x30, 0x60, 0x0, 0x18, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x5}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x5}, {}, {0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x800, 0x80, 0x9, 0x4, 0x4, 0x400, 0x39]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x9}, {0x2, 0x5}, {0x1}, {0x5}, {0x3, 0x8}, {0x6, 0xa}, {0x7, 0x9}, {0x7, 0x9}, {}, {0x0, 0x2}, {0x4, 0x3}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0x9}, {0x6}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x2, 0xffff, 0x0, 0x2e44, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9100, 0x3ff, 0x64e, 0x7, 0x7, 0x7fff, 0xff]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x48, 0x2, 0x1, 0x1b, 0x60, 0x3, 0x36, 0xc, 0x36, 0x6, 0x3, 0x5, 0x24, 0xc, 0x5, 0xb, 0x3, 0x60, 0x18, 0xb, 0x1b, 0x17]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xca77, 0x3, 0xfffa, 0x401, 0x8, 0x4, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe28b, 0xfff, 0x81, 0x7, 0xffb, 0xffff, 0xffff, 0xcb]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d, 0x9, 0x0, 0x5, 0x200, 0x40, 0xffff, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x6, 0x12, 0x3, 0x36, 0x4, 0x48, 0x12, 0x30, 0x6c, 0x48, 0x4, 0x48, 0x18, 0x0, 0x12, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x9, 0xa4, 0x4, 0xff, 0x2, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xab8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x418, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x5, 0x4, 0x8001, 0x2, 0x5, 0x1000, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x3, 0x18}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x52, 0xffff, 0xfe01, 0x6, 0x100, 0xffff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x24, 0x36, 0xb, 0x12, 0x0, 0x18, 0x3, 0x1, 0xc, 0x4, 0x12, 0x9, 0x1b, 0x0, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x9, 0x1, 0x2, 0x2, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x30, 0x36]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x2}, {0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x3}, {0x2}, {0x4}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x5}, {0x5}, {0x2, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {}, {0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x4, 0x12, 0xb, 0x1, 0x1, 0xc, 0x60, 0x1b, 0xc, 0x9, 0x16, 0x48, 0x30, 0x6c, 0x36, 0x30, 0xb, 0x6c, 0x4, 0x24, 0x1b, 0x9, 0x36, 0x4, 0x4, 0x24, 0x9, 0x6c, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x1, 0x30, 0x4, 0x30, 0x30, 0x30, 0xc, 0x1, 0x12, 0x2, 0x1b, 0x3, 0x30, 0x3, 0xc, 0x3, 0xb, 0xb, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x4, 0x920d, 0xfff7, 0xffff, 0x6, 0x80]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x1, 0x2, 0x8, 0x2, 0x4, 0x400, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x20, 0x7b, 0x1, 0x36, 0x5, 0x1, 0x16, 0x1b, 0x36, 0x30, 0x24, 0x16, 0x5, 0x9, 0x0, 0x3, 0x9, 0x1b, 0x0, 0xb]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x48, 0x30, 0x60, 0x6, 0x2, 0x9, 0x1, 0x12, 0xb, 0x46, 0x6c, 0xb, 0x12, 0x24, 0x16, 0x24, 0xc, 0x5, 0xc, 0x12, 0x18, 0x6c, 0xb, 0x3, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x52e, 0xfffd, 0x66, 0x40, 0x76b, 0x6, 0x25]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x101, 0x3f, 0x0, 0x6, 0x8, 0x3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1800, 0x80, 0xde7, 0x4db, 0x2, 0x3, 0x8982]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x38}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfe, 0x100, 0xba9b, 0x8, 0xff9c, 0x80, 0x8]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0xa}, {0x5, 0x4}, {0x4, 0x7}, {0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x5}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9d4, 0x854, 0x3c, 0x4, 0x80, 0x3, 0xe1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x1, 0x9, 0x401, 0x7f, 0x40, 0x3]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x8}, {0x4}, {0x5, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x5}, {}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x4}, {0x6, 0x3}, {0x4, 0x1}, {0x5}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0x8}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {0x2, 0x6}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0xc, 0x6, 0x6c, 0x30, 0x3, 0x16, 0x6c, 0xb, 0x48, 0x1b, 0x30, 0x36, 0x1, 0x9, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x39a, 0x7f, 0x40, 0x200, 0x401, 0x3db, 0x4, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x50, 0x5, 0x7, 0x40, 0x5, 0xff18]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x18, 0x36, 0x48, 0x6c, 0x48, 0x6c, 0x1b]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x1ff, 0x2, 0x9, 0x6, 0x893e, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x9, 0x6, 0xff, 0x5, 0x3, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x3, 0x1, 0x1ff, 0x8000, 0x1, 0x61f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb408, 0x6, 0x0, 0xfffb, 0x6, 0x7, 0x400]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x3}, {0x5, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x5, 0x4}, {0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x3}, {0x2}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x6}, {0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}]}, {0x4c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x6c, 0x12, 0x24, 0x12, 0x60, 0x36, 0x9, 0x6c, 0x2, 0x36, 0x30, 0x30, 0x6c, 0x36, 0x2, 0x6c, 0x6, 0x16, 0x1, 0x1, 0xb, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x7, 0x2, 0x1, 0x401, 0xfffd, 0x6]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0x9}, {0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {}, {0x3, 0x6}, {0x2, 0x6}, {0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x5}, {0x6, 0xa}, {0x6, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x5, 0x5}, {0x7}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x7}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x5, 0x2}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x3, 0x30, 0x48, 0x12, 0xc, 0x0, 0xc, 0x5, 0x18, 0x6c, 0x3, 0x60, 0x2, 0x0, 0x5, 0x0, 0x16, 0x12, 0x9, 0x19, 0x0, 0x2, 0x5, 0x30, 0x9, 0x12, 0xb, 0x1]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3f4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfe, 0x0, 0x101, 0x5, 0x400, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa87b, 0x6, 0x1685, 0x7, 0xfff4, 0x7, 0x2, 0x204]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3f, 0x9, 0x5, 0x1, 0x0, 0x6, 0x4fa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x1}, {0x6, 0x3}, {}, {0x7, 0x7}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x4}, {0x2, 0x5}, {0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x12, 0x6, 0x60, 0xb, 0x1b, 0x9, 0x48, 0x30, 0x3, 0x12, 0x30, 0x71, 0x24, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x29d7, 0x200, 0x7, 0x6, 0x87f, 0x3, 0xb393, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0xa}, {0x7}, {0x4, 0x9}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x1d}, {0x4, 0xa}, {0x4, 0x2}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x5, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x36, 0xc, 0x2, 0x66, 0x48, 0x2, 0x24, 0x3, 0x30, 0x60, 0x30, 0x4, 0x30, 0x3, 0x9, 0x9, 0x6, 0xb, 0x36, 0x12, 0x74, 0x4, 0x60, 0x2, 0x16, 0x1b, 0x60, 0x4, 0xfb84ba51855ad0d4]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x5, 0x60, 0x6c, 0x16, 0xc, 0x6, 0x6c, 0x48, 0x36, 0xc, 0x5, 0x58, 0x9, 0x2, 0x4, 0x60, 0x1, 0x9, 0x6, 0x48, 0x6, 0xc, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x4}, {0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0x1}, {}, {0x5, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x1c}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x1, 0x0, 0x3f, 0x7, 0x1, 0x5, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x400, 0xfff, 0x3ff, 0x9, 0x7fff, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {}, {0x7, 0x8}, {0x4, 0x8}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x3}, {0x4, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x4}, {0x0, 0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x16, 0x5, 0x1c9e121680a7f685, 0x36, 0x60, 0x36, 0x19, 0x0, 0x6, 0x9, 0x3, 0xc, 0x3, 0x8, 0x12, 0x3, 0x2, 0x48, 0x3, 0xb, 0x3, 0x4, 0x48, 0x3, 0x3, 0x30, 0xc, 0x16, 0x1, 0x24]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x0, 0x2, 0x9, 0x1, 0x60, 0x1, 0x48, 0x4, 0x36, 0x23, 0x30, 0x30, 0x2, 0x6c, 0x60, 0x4, 0x24, 0x5, 0x60, 0xc, 0x4, 0x12, 0x60, 0x0, 0x6, 0x2, 0x6c, 0x24, 0x0]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x9, 0x4, 0x4ca2, 0x9, 0x401, 0xdb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x0, 0x6, 0x1, 0x3ff, 0xb2, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0x5, 0x30, 0x2, 0x4, 0x0, 0x4, 0x6c, 0x2, 0x1b, 0x2, 0x5, 0x2, 0x1e, 0x18, 0x4, 0x2, 0x0, 0x24, 0x12, 0x4, 0x6c, 0x7e, 0x30]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x1}, {0x4, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x7}, {0x6, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x5}, {0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf626, 0x0, 0x5, 0x1, 0x36ec, 0x1, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x900, 0x6eb, 0x0, 0x200, 0x2, 0xd9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffc, 0x4, 0x0, 0x800, 0x118, 0x6, 0xffff]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x7}, {0x2, 0x6}, {0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x2}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x9}, {0x3, 0x5}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa7, 0x2, 0x7ff, 0x1, 0x400, 0x200, 0xffff, 0xc95]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xf630, 0x6, 0x8, 0x5, 0x400, 0x8]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd4fc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x95}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0xffff, 0x2, 0x5, 0x9, 0x101, 0x101]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x2}, {}, {0x5, 0x5}, {0x4, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0x5}, {0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x4}, {0x3, 0x1}, {0x6, 0x5}, {}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x30a7, 0x0, 0x8000, 0x6, 0x4, 0x2da, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x7}, {0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x7}, {0x1, 0x7}, {0x6, 0x8}, {0x5, 0x4}, {0x5, 0x4}, {0x6}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x5}, {0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x1}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x5, 0x8}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xec7, 0x401, 0x10, 0x0, 0x1, 0x43, 0x4, 0x1800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x1000, 0xffff, 0x5, 0xff, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x0, 0x20, 0x0, 0x27d, 0x401, 0xbd, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x24, 0x6, 0x3, 0x30, 0x3, 0x0, 0x0, 0x9, 0x12, 0x5, 0x36, 0x3, 0x48, 0x1, 0x16, 0xc]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x1, 0x4}, {0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x4, 0x9}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x708, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x13}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x55}]}, {0x348, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x330, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x36, 0x6, 0x12, 0xb, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x6, 0xfff8, 0xffff, 0x1, 0x1000, 0x2, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x683d, 0x2, 0x401, 0x8, 0x1, 0xfa35, 0x2, 0x821]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x3}, {0x1}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x13}, {0x4}, {0x1, 0x5}, {0x0, 0x14}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x7, 0x200, 0x100, 0x1, 0x7f, 0x7]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x31a, 0x2, 0x45ff, 0xc90b, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf000, 0x1, 0x9, 0x2, 0x5, 0x9df, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x8, 0x5, 0x7ff, 0x9, 0x6, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x521, 0x5, 0x5, 0xfff, 0x8, 0x0, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x2}, {0x7, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x400, 0x401, 0x0, 0x8, 0xce0f, 0x5, 0x5a68]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x8}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x6}, {0x5}, {0x4}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x2}, {0x6, 0x4}, {0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0x3}, {0x4}, {0x7, 0x4}, {0x4, 0x3}, {0x3, 0x8}, {}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x6, 0x1}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x24, 0x2, 0x48, 0x18, 0x2, 0x2c, 0x24, 0xc, 0x30, 0x6c, 0x4, 0xc, 0xb, 0x1, 0x60, 0x12, 0x4, 0x36, 0x48, 0x2, 0x9, 0x16, 0x5, 0x12, 0x18, 0x6c, 0x6, 0x36, 0x1b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x60, 0x30, 0x1, 0xc, 0x12, 0x3, 0x36, 0x24, 0x18, 0x16, 0x3, 0x16, 0x3, 0x2, 0x9, 0x1, 0xb, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x5, 0x0, 0xe32, 0x6e96, 0x40, 0x4, 0x7]}}]}, @NL80211_BAND_6GHZ={0x11c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x5, 0x24, 0x16, 0xb, 0x60, 0x1b, 0x48, 0x7c, 0xc, 0xc, 0x3, 0x24, 0x16, 0x18, 0x48, 0x9, 0x24, 0x48, 0x60, 0xc, 0x1b, 0x9, 0x12, 0x104eddee13bf717c, 0x60, 0x1, 0x1, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x100, 0x8b30, 0x8, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0xe, 0x3, 0x2, 0x1000, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x8, 0xfc01, 0x2, 0x9, 0x6, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd63, 0x8000, 0x2, 0x8001, 0x5, 0x18, 0x3]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x3}, {0x5}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x1b, 0xc, 0x2, 0x5, 0x5, 0x6, 0x60, 0x2, 0x6, 0x6, 0x30, 0x16, 0x5, 0x6, 0x18, 0x4, 0x48, 0x2, 0xc, 0x18, 0xeffb8dfd008c57b0, 0x5, 0x16, 0x30, 0x24, 0x2]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x1}, {0x6, 0x9}, {0x0, 0x12}, {0x1, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x1f}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x2}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3f, 0x1, 0x2, 0x8, 0x6, 0x5254]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4}]}]}, {0x368, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x3, 0x4, 0x4, 0xb5, 0x400, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xf7}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x60, 0xb, 0x48, 0x18, 0x30, 0x2, 0x12, 0x12, 0x9, 0xc, 0xb, 0x1b, 0x18, 0xc, 0x24]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x8}, {}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x1, 0x2ef, 0x3ff, 0x28, 0x9, 0x5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x100, 0x1f, 0x54, 0x40, 0x100, 0xff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x20}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4fa, 0x8000, 0x6, 0x0, 0x4, 0x0, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x100, 0x4, 0xff, 0x3ff, 0xc6a, 0x9]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x16, 0x12, 0x60, 0x36, 0xb, 0x1b, 0x2, 0x60, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x400, 0x1, 0xfff, 0x2, 0x6, 0xfc3a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x1}, {0x5, 0x9}, {0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x5, 0xa}, {0x3}, {0x2}, {0x2, 0x2}, {0x2, 0x3}, {}, {0x6, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {}, {0x5, 0x5}, {0x3, 0x7}, {0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x2, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7fff, 0x0, 0x18, 0xc0, 0x1ae, 0x0, 0x13e1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x200, 0x5, 0x5, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x265e, 0xffff, 0xe000, 0x4d, 0x3935, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x30, 0x36, 0x6c, 0x36, 0x16, 0x16, 0x5, 0x60, 0x3, 0x1, 0x1, 0x5, 0x16, 0x1a, 0x1, 0x60, 0x1b, 0x36, 0x30, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4c, 0x22, 0x1, 0x4, 0x60, 0x9, 0x6c, 0x1b, 0x30, 0x12, 0x5, 0x6, 0x30, 0x6, 0x6, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xff, 0x6, 0x1, 0x4, 0x1f, 0xb6]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x3, 0x9, 0x2, 0x60, 0x1b, 0x1, 0x3, 0x9, 0x1b, 0x6, 0x60, 0xb, 0x6, 0x2, 0x5, 0x48, 0x2, 0x5, 0x3, 0x16, 0x9, 0x0, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf, 0x1, 0x400, 0x1ff, 0x8, 0x3a, 0x9854, 0x100]}}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0xae, 0x1ff, 0x8, 0x4, 0x8, 0x8876]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x94, 0x6, 0x2, 0x1, 0x7, 0x2, 0x1000, 0x1]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x5, 0x5, 0x48, 0x67, 0x9, 0xb]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x3, 0x3}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x4}, {}, {0x5}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x100, 0x8000, 0x2, 0xb826, 0x1000, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3f, 0xff, 0x9, 0x49, 0x1, 0x6, 0x7]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x100, 0xfff, 0x1, 0x9, 0xafb, 0xfffb, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x378, 0xffff, 0x100, 0x1f, 0x8000, 0x0, 0x4]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x3dc, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x467, 0xfffe, 0x20, 0x4, 0x8, 0x8000, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {}, {0x6, 0x5}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3, 0x3, 0x0, 0x7, 0x0, 0x4, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x2, 0x0, 0xc, 0x24, 0x9, 0x48, 0x36, 0x16, 0x30, 0x6, 0x30, 0x30, 0x16, 0x5, 0x24, 0x1, 0x60, 0x30, 0x9, 0xc, 0xa]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x7, 0x4, 0x6e70, 0xfffa, 0x37, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x764, 0x6, 0x755, 0x7ff, 0x3, 0x9, 0x7f, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x6, 0x61f546ba35359fa6, 0x48, 0x16, 0x36, 0x5, 0x6, 0xb, 0xc, 0x16, 0x6c, 0x18, 0xb, 0x6, 0x9, 0x1b, 0x32, 0x18, 0x18, 0x2, 0x1, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x2, 0xff, 0x9, 0x80, 0xeac, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x8, 0x8, 0xd4, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0xac33, 0x4, 0xff8, 0x0, 0x2, 0x8]}}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x5}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x7, 0xa}, {0x5, 0x9}, {0x3, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x2}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x7}, {0x1, 0x4}, {0x7}, {0x5, 0x7}, {0x5, 0x3}, {0x7}, {0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x2, 0x5, 0x2, 0x9, 0x80, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x5, 0x48, 0x6, 0x6c, 0x4, 0x9, 0x18, 0x9, 0xb, 0x1b, 0x5, 0x5, 0x36, 0x48, 0x36, 0x18]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x9}, {0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {0x1}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0xffff, 0x3, 0x3f7e, 0x3, 0x20, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xbbe2, 0x24, 0xff58, 0xfffb, 0x1ff, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x7fff, 0xbeb, 0x200, 0x456, 0x401, 0x7, 0x623]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x48, 0x6c, 0x6, 0x3, 0x9, 0x48, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1b, 0x2, 0x5, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x4, 0x5, 0x4, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xd}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x6, 0x3f, 0x1, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3}, {0x7}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x1}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x2}, {0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x1}, {0x5, 0x3}, {0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xad98, 0xf001, 0x0, 0x6, 0x80, 0x0, 0x9]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2c0, 0x100, 0x5, 0xffff, 0x4, 0x671, 0x9]}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x230, 0x11d, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa07, 0x0, 0x0, 0x6, 0x7f, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x8}, {0x5, 0x3}, {0x7, 0xa}, {0x2, 0xa}, {0x7, 0x6}, {0x4, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x2}, {0x6, 0x9}, {}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x3}, {0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x5, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x4, 0xcf, 0x3ff, 0x7, 0x5b05, 0x81]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x18, 0xffff, 0x3, 0x5, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x7}, {0x5, 0x3}, {}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x5}, {0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x1}, {0x5, 0x7}, {0x6, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x8}, {0x6}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xffff, 0x0, 0x101, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x9}, {0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x4, 0x1}, {0x5, 0x8}, {0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1000, 0x20, 0x1, 0x101, 0x8, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x7bc, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x318, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe4, 0x9, 0x1f, 0x4, 0x0, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x3, 0x3, 0x7ff, 0x1ff, 0x9]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x118, 0x535, 0x9, 0x5, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x18, 0x4f, 0x80, 0x5, 0x4, 0x1, 0x3, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x60, 0x36, 0x4, 0x9, 0x12, 0x30, 0x30, 0x1f, 0x48, 0x16, 0x16, 0x30, 0x9, 0xc, 0x24, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x5}, {0x3, 0x1}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3e, 0x2, 0xbf6, 0x9, 0x20, 0x2e7c, 0x1, 0x401]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x18, 0x48, 0x2, 0x16, 0x0, 0x1b, 0xb, 0x16, 0xb, 0x12, 0x3, 0x30, 0x6c, 0xb, 0x16, 0x12, 0x2bce777f55b96281, 0x6, 0x18, 0x12, 0x6c, 0x1f]}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0xa, 0x3, 0x12, 0x18, 0x48, 0xc, 0x12, 0x6, 0x0, 0x6c, 0x48, 0x18, 0x1b, 0x60, 0x60, 0x4, 0x2, 0x1, 0x18, 0x16, 0x60, 0x1, 0x9]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x34bf0ddd42d4dc5f, 0x5, 0x3d, 0x11, 0x6c, 0x2, 0x2, 0x1b, 0x6, 0x24, 0x1b, 0x0, 0x14, 0x0, 0x3, 0xc, 0xb, 0x12, 0x0, 0x6, 0xc, 0xb27d302878bbb397]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1, 0x9, 0x3, 0x4, 0x2, 0x2, 0x800, 0x3]}}]}, @NL80211_BAND_6GHZ={0x100, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x1, 0x2, 0x1, 0xba22, 0x7, 0x0, 0x1f55]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xec1a, 0x4, 0xe29a, 0xf45d, 0xffff, 0x3f, 0x401, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x1}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x1b}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x4}, {}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x101, 0x1f, 0x100, 0x6, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x1e}, {0x4, 0x5}, {0x7, 0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0x6}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x3, 0x2}, {0x7, 0xa}, {0x4}, {0x2, 0x4}, {0x2, 0x5}, {0x3}, {0x7, 0xa}, {0x2, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x4, 0x3}, {0x3}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x3, 0x4}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x9, 0x3, 0x36, 0x36, 0x48, 0x3, 0x2, 0x9, 0x18, 0xb, 0xb, 0x60, 0x1b, 0x9, 0x1b, 0x36, 0x18, 0x3, 0x3, 0x24, 0x24, 0xc, 0x6c, 0x9, 0x48, 0x16, 0x9, 0x5, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xc57, 0x200, 0x27d4, 0x3, 0x5, 0x8001, 0x40]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x8}, {0x6, 0x9}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x1b}, {0x2, 0x4}, {0x4}, {0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x5, 0x3}, {0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}]}, {0x3f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x5}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x2, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x3ff, 0x9, 0x3, 0xff, 0xdca2, 0x7, 0xfffe]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x48, 0x9, 0x6, 0x16, 0x6c, 0x12, 0xc, 0x18, 0x48, 0x5, 0x60, 0x24, 0x24, 0x71, 0x9, 0x1, 0x5, 0x16, 0x3, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x100, 0x4, 0x401, 0x7f, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x5, 0x7, 0x401, 0x7, 0x3, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x1, 0x7ff, 0x4, 0x2, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1f, 0xa11, 0x0, 0x7, 0x9, 0x200, 0xffc0]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x7}, {0x5, 0x8}, {0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x2}, {0x7}, {0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x1}, {0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x3, 0x60, 0x1b, 0x2, 0x3, 0x5, 0x2b49f00ab0959957, 0x16, 0xc, 0x6, 0x5, 0xc, 0x18, 0x48, 0x24, 0x60, 0x18, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x9}, {0x0, 0x7}, {}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x5}, {0x5, 0x7}, {0x4}, {0x3, 0x9}, {0x5}, {0x2, 0x2}, {0x3}, {0x0, 0x6}, {0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xad7, 0x0, 0xffff, 0x6, 0x3, 0xa1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x218, 0x8776, 0x6, 0xc4d, 0x8, 0x7, 0x9a5, 0x400]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x2}, {0x1, 0x4}, {0x6}, {0x0, 0x7}, {0x5}, {0x0, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x6, 0x3, 0x1, 0x63, 0x18, 0x60, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa8e8, 0x7, 0x40, 0x8, 0x9, 0x0, 0x7]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x1ff, 0x60e, 0x3, 0x2, 0x8001, 0x0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x1f, 0x0, 0x2, 0x3, 0x8ff, 0xc57]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x3, 0x6, 0xc, 0x12, 0xb, 0x60, 0x9, 0x6, 0x6, 0x0, 0x2, 0x4, 0x9, 0x24, 0x5, 0x1, 0xc, 0x12, 0x16, 0x6, 0x3, 0x12]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0xa}, {0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x12, 0x2, 0x2, 0x6c, 0x16, 0x3, 0x33, 0x4, 0x30, 0x36, 0x5, 0x6, 0x24, 0x30]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4920, 0xff, 0x2, 0x7fff, 0x7fff, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x18, 0x36, 0x4, 0x1, 0xe, 0x1b, 0x12]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x9, 0x8, 0x8, 0x2, 0x3, 0x80]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x24, 0x12]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x2710}, 0x1, 0x0, 0x0, 0x200280c0}, 0x4000011) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x5452, 0xffffffffffffffff) [ 1266.986636] ? genl_rcv+0x15/0x40 [ 1266.990089] genl_rcv+0x24/0x40 [ 1266.993367] netlink_unicast+0x4d5/0x690 [ 1266.997427] ? netlink_sendskb+0x110/0x110 [ 1267.001654] ? _copy_from_iter_full+0x229/0x7c0 [ 1267.006321] ? __phys_addr_symbol+0x2c/0x70 [ 1267.010643] ? __check_object_size+0x17b/0x3e0 [ 1267.015233] netlink_sendmsg+0x6c3/0xc50 [ 1267.019298] ? aa_af_perm+0x230/0x230 [ 1267.023096] ? nlmsg_notify+0x1f0/0x1f0 [ 1267.027064] ? kernel_recvmsg+0x220/0x220 [ 1267.031235] ? nlmsg_notify+0x1f0/0x1f0 [ 1267.035236] sock_sendmsg+0xc3/0x120 [ 1267.038948] ___sys_sendmsg+0x7bb/0x8e0 [ 1267.042919] ? copy_msghdr_from_user+0x440/0x440 [ 1267.047691] ? __fget+0x32f/0x510 [ 1267.051159] ? lock_downgrade+0x720/0x720 [ 1267.055312] ? check_preemption_disabled+0x41/0x280 [ 1267.060323] ? check_preemption_disabled+0x41/0x280 [ 1267.065333] ? __fget+0x356/0x510 [ 1267.068772] ? do_dup2+0x450/0x450 [ 1267.072301] ? debug_object_active_state+0x254/0x330 [ 1267.077382] ? __fdget+0x1d0/0x230 [ 1267.080907] __x64_sys_sendmsg+0x132/0x220 [ 1267.085210] ? __sys_sendmsg+0x1b0/0x1b0 [ 1267.089251] ? __se_sys_futex+0x298/0x3b0 [ 1267.093382] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1267.098754] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1267.103749] ? do_syscall_64+0x21/0x620 [ 1267.107703] do_syscall_64+0xf9/0x620 [ 1267.111486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.116655] RIP: 0033:0x7f4a1f2970f9 [ 1267.120344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1267.139228] RSP: 002b:00007f4a1d809168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.146914] RAX: ffffffffffffffda RBX: 00007f4a1f3b6f80 RCX: 00007f4a1f2970f9 [ 1267.154162] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000005 [ 1267.161408] RBP: 00007f4a1f2f2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1267.168658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.175907] R13: 00007ffe3acbffaf R14: 00007f4a1d809300 R15: 0000000000022000 [ 1267.183152] Modules linked in: [ 1267.186327] ---[ end trace a992cc93b058a201 ]--- [ 1267.191071] RIP: 0010:__lock_acquire+0x1eb/0x3ff0 [ 1267.195887] Code: 2b 29 00 00 48 81 c4 98 01 00 00 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 2a 00 00 49 81 3e 20 f2 66 8c 0f 84 65 ff ff [ 1267.214763] RSP: 0018:ffff888086cd7270 EFLAGS: 00010006 [ 1267.220103] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1267.227355] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000001 [ 1267.234602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 1267.241848] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1267.249094] R13: ffff88808fd960c0 R14: 0000000000000110 R15: 0000000000000001 [ 1267.256351] FS: 00007f4a1d809700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1267.264551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1267.270409] CR2: 00007f14fa120263 CR3: 0000000095049000 CR4: 00000000003406f0 [ 1267.277667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1267.284914] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1267.292162] Kernel panic - not syncing: Fatal exception [ 1267.297661] Kernel Offset: disabled [ 1267.301268] Rebooting in 86400 seconds..