PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x358, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x298, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8b0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f0, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x320, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}]}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8b0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f0, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x220, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}]}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8b0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f0, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x218, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x158, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x894, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7d4, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}]}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x210, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x150, 0x11d, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x888, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c8, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x888}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x208, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x148, 0x11d, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x874, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x7b4, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7f, 0x7ff, 0x6, 0x6, 0x5, 0x7c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x2, 0x4, 0x30, 0x22, 0x1b, 0xc, 0x16, 0x18, 0x36, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x60, 0x32b37932636c261, 0x16, 0x36, 0x16, 0x18, 0x60, 0x60, 0x6c, 0x4, 0x36, 0x48, 0xc, 0x9, 0x60]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x5}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81e, 0x8000, 0x6, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0xfffe, 0x2, 0xfe00, 0xd5, 0x7, 0x1c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0x6, 0xfff, 0x81, 0x7, 0x86, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x100, 0xc74d, 0x3, 0x200, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {}, {0x4, 0x5}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {}, {0x4, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x3}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x7, 0x1, 0x1, 0x9447, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x30, 0x24, 0x3, 0x6c, 0x24, 0x9, 0x48, 0x9, 0x48, 0x9, 0x9, 0x6c, 0x60, 0x6c, 0x6c, 0x4, 0x6c, 0x3, 0x6c, 0x22, 0x16, 0xb, 0xc, 0x36, 0x6c, 0xc, 0x63, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4}, {0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x7}, {0x3, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x48, 0x3, 0x60, 0xc, 0xc, 0x2, 0x6, 0x30, 0x5, 0x9, 0x9, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8001, 0x7f, 0xfff9, 0x2, 0x1, 0xf800, 0x9]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xe, 0xc, 0x60, 0x12, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x1b, 0x6c, 0x1b, 0x30, 0x1, 0xb, 0x5, 0xb, 0x2, 0x36, 0xc, 0x24, 0x6, 0xb, 0x1b, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0xfff8, 0x1, 0x1, 0x1, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x1}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x5}, {0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x98, 0x2, 0x7ff, 0x101, 0xb75, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x18, 0x1b, 0x18, 0x36, 0x48, 0x9, 0x0, 0x48, 0x24, 0x9, 0x18, 0x1, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1f, 0x7f, 0x8000, 0x6, 0xff, 0x5db]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xc, 0x2, 0x6, 0x36, 0x60, 0x16, 0x6c, 0x16, 0x18, 0x5, 0x9, 0x48, 0x60, 0x5, 0xc, 0x3, 0x6, 0x36, 0x62, 0x2, 0x30, 0x9, 0x48, 0x5e, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x4, 0x1, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x101, 0x84d, 0xff46, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x2}, {0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x7}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x2, 0x7}, {0x5}, {0x6, 0x5}, {0x3, 0x8}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x300, 0x9ba, 0x8, 0x338e, 0x5, 0xf503, 0x6, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0xfff, 0xffff, 0x2, 0xdd27, 0x8000, 0xd7f, 0xd54]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0x5, 0x4, 0x2, 0x24, 0x18, 0xc, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x81, 0xfb9, 0x7, 0xfff, 0x81, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0xa}, {0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x24, 0x1, 0x36, 0x3, 0x18, 0x4, 0x18, 0x16, 0x4, 0x16, 0x30, 0xb, 0x16, 0x48, 0x24, 0x12, 0xb, 0x16, 0x3, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x874}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x200, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x358, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x298, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x320, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x9}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x4}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x2, 0x100, 0xffff, 0xf000, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x8}, {0x4}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x2}, {0x2, 0xe}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6}, {0x5}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x2, 0x5e7f, 0xfffc, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x180, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}]}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x220, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:42 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x218, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x158, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x210, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x150, 0x11d, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:43 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}]}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x208, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x148, 0x11d, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}]}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:43 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x200, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb838, 0xe7, 0x3, 0x7ff, 0x7ede, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x5}, {0x3}, {0x3, 0x9}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x6}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x4}, {0x4, 0x3}]}]}]}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x180, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x5, 0x8}, {}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x7, 0x2}]}]}]}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:44 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}]}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}]}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:45 executing program 4: syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: syz_io_uring_setup(0x29b1, 0x0, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), 0x0) 03:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, 0x0) 03:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, 0x0) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100), &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, 0x0) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x130, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x2}, {0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}]}]}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x800) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x0) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x81, 0x7, 0x1000, 0x3, 0x8000, 0x1]}}]}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x7, 0x1}]}]}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x800) 03:35:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x0) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xb0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xa4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x0) 03:35:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}}, 0x800) 03:35:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:55 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}}, 0x0) 03:35:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}}, 0x800) 03:35:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x60}}, 0x0) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:56 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xd8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 03:35:57 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 03:35:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:57 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 03:35:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:57 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000780)=0xd1, 0x4) 03:35:57 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:57 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:57 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 4: syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:58 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:58 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:58 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:58 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:35:58 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:35:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:58 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 0: syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 4: syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) syz_io_uring_setup(0x29b1, &(0x7f0000000100)={0x0, 0x575b, 0x2, 0x1, 0x3b6}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:35:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, 0x30, r1, 0x0) 03:35:59 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2328, &(0x7f0000000000)={0x0, 0xaadc, 0x2, 0x1, 0x122, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 03:35:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x78, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:35:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 0: getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x4d, 0x30, 0x5, 0x9}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r0, 0x3, 0x400, 0x101, 0x401, 0x28, 0x7ff, 0x8, {r0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x3ff}}, 0x8, 0x36fef436, 0xfffffffe, 0x4, 0x1000}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={r0, 0x8e0e, 0x80, 0x6, 0x5, 0x8, 0x400, 0xffffffff, {r1, @in={{0x2, 0x4e22, @local}}, 0x4, 0x1, 0x4000000, 0x8, 0x200}}, &(0x7f0000000500)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r0, @in6={{0xa, 0x4e23, 0x20000000, @loopback, 0x3f}}, 0x6, 0x7}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0x8d, &(0x7f0000000140)={0x0, 0xc314, 0x2, 0x3, 0x217}) syz_io_uring_setup(0x1fe, &(0x7f0000000000)={0x0, 0xffa7, 0x0, 0x2, 0x3f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x40, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x1010, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) 03:36:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 4: r0 = io_uring_setup(0x74a7, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x3, 0x200000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x800000, 0x10, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x800) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:36:00 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) 03:36:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:36:00 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000300)=0x1) r2 = io_uring_setup(0x55ea, &(0x7f0000000040)={0x0, 0x3990, 0x2, 0x1, 0x291, 0x0, r0}) r3 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@remote, @netrom, @netrom, @remote, @default, @remote, @bcast, @bcast]}, &(0x7f0000000140)=0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[r3]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x800) 03:36:01 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:01 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8010, r2, 0x10000000) 03:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) socket(0x1e, 0x5, 0x0) 03:36:01 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:01 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) socket(0x1e, 0x5, 0x0) 03:36:01 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 4: socket(0x1e, 0x5, 0x0) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1, 0x200}}, 0xff1f, 0xabb}, &(0x7f0000000100)=0x90) socket(0x1e, 0x5, 0x0) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 4: socket(0x0, 0x5, 0x0) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) socket(0x1e, 0x5, 0x0) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 4: socket(0x0, 0x5, 0x0) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 0: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 5: socket(0x1e, 0x5, 0x0) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 4: socket(0x0, 0x5, 0x0) 03:36:02 executing program 0: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 5: socket(0x0, 0x5, 0x0) 03:36:02 executing program 4: socket(0x1e, 0x0, 0x0) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}]}, 0x38}}, 0x800) 03:36:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 5: socket(0x0, 0x5, 0x0) 03:36:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:02 executing program 0: r0 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}]}, 0x38}}, 0x0) 03:36:02 executing program 4: socket(0x1e, 0x0, 0x0) 03:36:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 0: r0 = socket(0x1e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 4: socket(0x1e, 0x0, 0x0) 03:36:03 executing program 5: socket(0x0, 0x5, 0x0) 03:36:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x800) 03:36:03 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&-\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40808) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 03:36:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 0: r0 = socket(0x1e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:03 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f0000000340), 0x48) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r0, r0, r1, r0, r2, r3, r4, r5, r6, r0]}, 0xa) 03:36:03 executing program 5: socket(0x1e, 0x0, 0x0) 03:36:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x64}}, 0x0) 03:36:03 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&-\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40808) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 03:36:03 executing program 0: r0 = socket(0x1e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:03 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/98, 0x62}], 0x8) 03:36:03 executing program 5: socket(0x1e, 0x0, 0x0) 03:36:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0xc0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f0000000340), 0x48) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r0, r0, r1, r0, r2, r3, r4, r5, r6, r0]}, 0xa) 03:36:03 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&-\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40808) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) 03:36:03 executing program 0: socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:03 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/98, 0x62}], 0x8) 03:36:03 executing program 5: socket(0x1e, 0x0, 0x0) 03:36:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x8c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:03 executing program 0: socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:03 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x80000000, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:03 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&-\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40808) 03:36:03 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f0000000340), 0x48) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) r6 = socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r0, r0, r1, r0, r2, r3, r4, r5, r6, r0]}, 0xa) 03:36:03 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/98, 0x62}], 0x8) 03:36:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:36:04 executing program 0: socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:36:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) 03:36:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) 03:36:04 executing program 0: r0 = socket(0x1e, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 03:36:04 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 03:36:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x800) 03:36:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:36:04 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 03:36:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xffffffffffffff11, &(0x7f0000000180)={&(0x7f0000000300)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) 03:36:04 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) 03:36:04 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000000340)={0xfffffffffffffffc}, 0x48) socket$l2tp(0x2, 0x2, 0x73) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:04 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ff7000/0x1000)=nil) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 03:36:04 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 03:36:04 executing program 3: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:04 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:04 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 03:36:04 executing program 1: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x70}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000040)={0x747, 0x0, &(0x7f0000000000)=[r0, r0, r0]}, 0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/null\x00', 0x20c000, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = geteuid() r9 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, r8, 0x0, r9, 0x0, 0x20, 0x101}, 0x3, 0x7, 0x10001, 0x8, 0x0, 0x0, 0x3ff}) mount$9p_fd(0x0, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)='9p\x00', 0x21000, &(0x7f0000001f40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose='loose'}, {@cache_none='cache=none'}, {@cache_none='cache=none'}], [{@uid_eq={'uid', 0x3d, r9}}, {@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsdef={'smackfsdef'}}, {@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]}}) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000001480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48803}, 0x40084) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000680)=0xfffffe01, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x100, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r10, 0x200, 0x20}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001500)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000002080)={0x864, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x184, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ce469102fab1f0c74e90d44e5114b8a132ca9f1de4820e3d66a14344a330a126"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @mcast1, 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "908b5ddf97b173190e34da56c44e312a00"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:05 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 03:36:05 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000340), 0x48) 03:36:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_io_uring_setup(0x4098, &(0x7f00000005c0)={0x0, 0x400, 0x0, 0x2, 0x3}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r1, 0x8000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x420480, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="008f87000000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003fe0000000008000b000104000006e5d5306d000000050012000100000006001100000000000865280007000000e03d3377b1022e47e7df0307d593dd1f8b04e913c2b9c9d0fa241942b753781fa46b1e97e0f2459beacce82ea49b5feb"], 0x64}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/ipc\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x100, 0x7f, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x26}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0)=0xfffffffe, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3e72, 0x65}}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x8c1) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r9, &(0x7f0000000340), 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0x25fc, 0x0, &(0x7f0000000040)=[r0, r0, r9]}, 0x3) 03:36:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:05 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 03:36:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 03:36:05 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x4000010, r0, 0x8000000) 03:36:05 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x8000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba0000003f00000002000000070000008c8000000100000004000000099404010007077c0a01010200"]}) 03:36:05 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8000000) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = io_uring_setup(0x106254, &(0x7f0000000100)={0x0, 0xd80c, 0x1, 0x3, 0x303, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) 03:36:05 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:05 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) socket$inet_udp(0x2, 0x2, 0x0) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:05 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) 03:36:05 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x8000040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:05 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:05 executing program 1: syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x7cde, &(0x7f0000000000)={0x0, 0xd376, 0x0, 0x1, 0x3cb}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:36:06 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 03:36:06 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:06 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x60ce, &(0x7f0000000000)={0x0, 0xf237, 0x1, 0x2, 0x27e, 0x0, r0}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x7659, &(0x7f0000000100)={0x0, 0x487, 0x0, 0x2, 0x3bd, 0x0, r1}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:06 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 5: pipe2(&(0x7f0000000440), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 03:36:06 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 03:36:06 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 0: clock_gettime(0x7, &(0x7f0000000080)) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:06 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 1: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000340), 0x48) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:06 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) 03:36:06 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) 03:36:06 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) 03:36:06 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:06 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:06 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:06 executing program 0: clock_gettime(0x0, &(0x7f0000000080)) 03:36:06 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) 03:36:06 executing program 1: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 03:36:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:07 executing program 0: clock_gettime(0x7, 0x0) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:07 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:07 executing program 0: clock_gettime(0x7, 0x0) 03:36:07 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:07 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x308bdd48d85383a1, 0x13, r0, 0x8000000) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:07 executing program 0: clock_gettime(0x7, 0x0) 03:36:07 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 03:36:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:07 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0x77da, &(0x7f00000000c0)={0x0, 0xcd18, 0x2, 0x2, 0x303, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_setup(0x4d6b, &(0x7f00000003c0)={0x0, 0xd30f, 0x11, 0x3, 0x93, 0x0, r3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x400001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000480)=0x8) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000340), 0x48) r6 = eventfd2(0x9, 0x1) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r7, &(0x7f0000000580)={0x6, 0x20, 0x0, 0x20, 0x400000000000}, 0x48) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r8, &(0x7f0000000340), 0x48) r9 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x2400) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x2, 0x8, 0x20}, &(0x7f0000000540)=0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[r0, r5, r6, r0, r7, r0, r8, r9]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:07 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:07 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 03:36:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x420480, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/ipc\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x420480, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/ipc\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x100, 0x7f, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x26}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x7f, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x71}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x26}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6423aba2", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf256d00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x44040) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x20040000) r9 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r9, 0x8000000) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:07 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:07 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 03:36:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a010100000000004424691078da16ba"]}) 03:36:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:07 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:07 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:08 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:08 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:08 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:08 executing program 2: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 03:36:08 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:08 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:08 executing program 2: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8800) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/91, 0x5b}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000680)=0xfffffe01, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x101}, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x1}]}, &(0x7f00000000c0)=0x10) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) connect$nfc_llcp(r4, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x6, 0x2f, 0x4, "9afde28a239e2b47a3b6b2d96d7ab925c55f6f75a50522fe03a2d83c68f684ef81661e2e4e3bfb39ca6171be536249a17c4d418eb8da04f395a319df7c22ab", 0x24}, 0x60) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 03:36:08 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:08 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:08 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:08 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a0101000000"]}) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3507}]}, 0x38}}, 0x0) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:09 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0x20, 0x4f, 0x0, 0x1}]}, 0x28}}, 0x0) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:09 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x18}}, 0x0) 03:36:09 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990780a"]}) 03:36:09 executing program 0: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x8d64, 0x20, 0x0, 0x20, 0x5}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 4: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400"]}) 03:36:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:10 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00'}) 03:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:10 executing program 1: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000"]}) 03:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d004400670000102990"]}) 03:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:10 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x6db0, &(0x7f0000000000)={0x0, 0x7092, 0x4, 0x0, 0x1c7, 0x0, r0}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0x4557, &(0x7f0000000300)={0x0, 0x17fd, 0x4, 0x0, 0x182, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r3, 0x8000000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) syz_io_uring_setup(0x674f, &(0x7f0000000100)={0x0, 0xe046, 0x20, 0x1, 0x83, 0x0, r2}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 03:36:10 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:10 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xffff, 0x3, [0x0, 0x5, 0x3f69]}, &(0x7f0000000040)=0xe) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:10 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:10 executing program 0: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:10 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:11 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:11 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x70a2, &(0x7f0000000000)={0x0, 0xf154, 0x1, 0x2, 0x10363, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[r2, 0xffffffffffffffff]}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', 0x0}) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:11 executing program 0: r0 = syz_io_uring_setup(0x4098, 0x0, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0xbcf, &(0x7f0000000000)={0x0, 0xd68f, 0x1, 0x0, 0x8e}) syz_extract_tcp_res(&(0x7f0000000080), 0xa, 0x10000004) 03:36:11 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:11 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0xbcf, &(0x7f0000000000)={0x0, 0xd68f, 0x1, 0x0, 0x8e}) syz_extract_tcp_res(&(0x7f0000000080), 0xa, 0x10000004) 03:36:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:11 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00440067000010"]}) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0]}) 03:36:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0xbcf, &(0x7f0000000000)={0x0, 0xd68f, 0x1, 0x0, 0x8e}) syz_extract_tcp_res(&(0x7f0000000080), 0xa, 0x10000004) 03:36:11 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:11 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 03:36:11 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0xbcf, &(0x7f0000000000)={0x0, 0xd68f, 0x1, 0x0, 0x8e}) 03:36:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:12 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB]}) 03:36:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:12 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) io_uring_setup(0xbcf, &(0x7f0000000000)={0x0, 0xd68f, 0x1, 0x0, 0x8e}) 03:36:12 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d00"]}) 03:36:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:12 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:13 executing program 4: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:13 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:13 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000"]}) 03:36:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:36:13 executing program 1: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:13 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:13 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x40000000) 03:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="8000001000000003000000"]}) 03:36:13 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x10000000) 03:36:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="8000001000000003000000"]}) 03:36:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:13 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 1: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x8006000) 03:36:13 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x10, 0xdd, 0x3, 0x1c, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@remote, 0x1, 0x4, 0x10}, @sadb_x_nat_t_type={0x1, 0x14, 0xc0}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd27, 0x3504}, @sadb_key={0xc, 0x8, 0x298, 0x0, "297a4d9945f04ee47ed86bedd37a8d36c0923be341c29299ed44b0b194cc590cf307b41ada82157a6d29d7097e8f3349ea3b3c97cc87339ba276cbee3bf07c0b3f6a4e30587acea29d5f068a440ab5300d53db"}, @sadb_x_sa2={0x2, 0x13, 0x65, 0x0, 0x0, 0x70bd2a}, @sadb_lifetime={0x4, 0x3, 0x9, 0x3, 0x5, 0x1ff}]}, 0xe0}}, 0x800) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x8000000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x4004010, 0xffffffffffffffff, 0xff) 03:36:13 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:13 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="8000001000000003000000"]}) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 5: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000009) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0xca070, r3, 0x10000000) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004"]}) 03:36:14 executing program 0: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004"]}) 03:36:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200)={0x0, 0x87642, 0x0, 0x0, 0x1}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xdc, r5, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dadf5cfb38ca9405c6ce06d04d9cf4325df4ff2efef5cce"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7bca6552340d48fd10d78285bcb7c4acad9f1a9afc51c3c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e892bc21d74524a3478599aa69dda90e8f732da0cbcc5d2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "747fd639a805a01473efe277d10c5d027731ae7e6eeec3a0"}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r1, 0x8000000) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004"]}) 03:36:14 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0xca070, r3, 0x10000000) 03:36:14 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="80000010000000030000000441"]}) 03:36:14 executing program 5: syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="80000010000000030000000441"]}) 03:36:14 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:14 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0xca070, r3, 0x10000000) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYBLOB="80000010000000030000000441"]}) 03:36:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:14 executing program 5: r0 = syz_io_uring_setup(0x24ec, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:14 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xbf25, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:15 executing program 5: r0 = syz_io_uring_setup(0x24ec, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) 03:36:15 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="800000100000000300000004410d0044006700001029"]}) 03:36:15 executing program 5: r0 = syz_io_uring_setup(0x24ec, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) 03:36:15 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) 03:36:15 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r0, 0x8000000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)=0x3) syz_io_uring_setup(0x4c9a, &(0x7f0000000000)={0x0, 0x213a, 0x2, 0x1, 0x1c1, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) pipe2(&(0x7f0000000440), 0x0) 03:36:15 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 3: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:15 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:15 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:15 executing program 3: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) 03:36:15 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:16 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x9a25, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:16 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:16 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:16 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:16 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x401c000}, 0x20000000) 03:36:16 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) 03:36:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:16 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:16 executing program 4: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:16 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) 03:36:17 executing program 3: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xe8}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x2) 03:36:17 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100)) 03:36:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x34}, &(0x7f00000000c0)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000000)={0x0, 0xe613, 0x0, 0x4, 0x800008}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r1, 0x8000000) 03:36:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 03:36:17 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f9ffff0045001100000006ffffffffffff001b00000000b17815000000000000000340e5f55699b29eda17564534f97da6348999e81a7da0861995bc8bcefaeee96f12e01c56"], 0x49) socket$inet_sctp(0x2, 0x0, 0x84) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x7fff}, &(0x7f0000000540)=0x90) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000680)=0xfffffe01, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = syz_io_uring_setup(0xd42, &(0x7f00000000c0)={0x0, 0xb482, 0x4, 0x2, 0x129, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x4281, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x4, 0x10}, &(0x7f0000000340)=0xc) r7 = syz_io_uring_setup(0xc94, &(0x7f0000000200)={0x0, 0x3a95, 0x8, 0xfffffffd, 0x0, 0x0, r5}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x50, r7, 0x8000000) 03:36:17 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001004", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:17 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 4: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 2: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) 03:36:17 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x308bdd48d95383ac, 0x11, r1, 0x8000000) 03:36:17 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:17 executing program 4: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 03:36:17 executing program 3: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:17 executing program 4: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:17 executing program 3: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 5: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:17 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) [ 3561.228068][T14953] FAULT_INJECTION: forcing a failure. [ 3561.228068][T14953] name failslab, interval 1, probability 0, space 0, times 0 [ 3561.276268][T14953] CPU: 1 PID: 14953 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 3561.285173][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3561.295329][T14953] Call Trace: [ 3561.298610][T14953] dump_stack+0x107/0x163 [ 3561.302955][T14953] should_fail.cold+0x5/0xa [ 3561.307463][T14953] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3561.313229][T14953] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3561.318963][T14953] should_failslab+0x5/0x10 [ 3561.323476][T14953] __kmalloc+0x72/0x3e0 [ 3561.327646][T14953] tomoyo_realpath_from_path+0xc3/0x620 [ 3561.333209][T14953] ? tomoyo_profile+0x42/0x50 [ 3561.337923][T14953] tomoyo_path_number_perm+0x1d5/0x590 [ 3561.343389][T14953] ? tomoyo_path_number_perm+0x18d/0x590 [ 3561.349271][T14953] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3561.355523][T14953] ? lock_downgrade+0x6d0/0x6d0 [ 3561.360378][T14953] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3561.365930][T14953] ? __fget_files+0x288/0x3d0 [ 3561.370596][T14953] security_file_ioctl+0x50/0xb0 [ 3561.375540][T14953] __x64_sys_ioctl+0xb3/0x200 [ 3561.380212][T14953] do_syscall_64+0x2d/0x70 [ 3561.384630][T14953] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3561.390532][T14953] RIP: 0033:0x45e219 [ 3561.394433][T14953] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3561.414046][T14953] RSP: 002b:00007f69cf6aac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:36:18 executing program 5 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:18 executing program 3: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3561.422464][T14953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 3561.430531][T14953] RDX: 0000000020000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 3561.438528][T14953] RBP: 00007f69cf6aaca0 R08: 0000000000000000 R09: 0000000000000000 [ 3561.446503][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3561.454459][T14953] R13: 00007ffd51fbafbf R14: 00007f69cf6ab9c0 R15: 000000000119bf8c [ 3561.480924][T14953] ERROR: Out of memory at tomoyo_realpath_from_path. 03:36:18 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:18 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) r2 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) [ 3561.560440][T14978] FAULT_INJECTION: forcing a failure. [ 3561.560440][T14978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3561.616660][T14978] CPU: 0 PID: 14978 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3561.625675][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3561.635744][T14978] Call Trace: [ 3561.639030][T14978] dump_stack+0x107/0x163 [ 3561.643373][T14978] should_fail.cold+0x5/0xa [ 3561.647886][T14978] _copy_from_user+0x2c/0x180 [ 3561.652745][T14978] io_uring_setup+0xa3/0x38e0 [ 3561.658140][T14978] ? io_wq_submit_work+0x6f0/0x6f0 03:36:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:18 executing program 0: r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) [ 3561.664243][T14978] ? wait_for_completion_io+0x260/0x260 [ 3561.669800][T14978] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3561.676050][T14978] ? vfs_write+0x18e/0xa30 [ 3561.680475][T14978] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3561.686812][T14978] ? fput+0x2a/0x50 [ 3561.690632][T14978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3561.697472][T14978] do_syscall_64+0x2d/0x70 [ 3561.702836][T14978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3561.708887][T14978] RIP: 0033:0x45e219 [ 3561.713942][T14978] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3561.733972][T14978] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3561.742413][T14978] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3561.750413][T14978] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3561.758853][T14978] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 03:36:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3561.766829][T14978] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3561.774798][T14978] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 [ 3561.798734][T14994] FAULT_INJECTION: forcing a failure. [ 3561.798734][T14994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3561.854210][T14994] CPU: 0 PID: 14994 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 3561.863013][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3561.873066][T14994] Call Trace: [ 3561.876347][T14994] dump_stack+0x107/0x163 [ 3561.880689][T14994] should_fail.cold+0x5/0xa [ 3561.885198][T14994] _copy_from_user+0x2c/0x180 [ 3561.889894][T14994] kstrtouint_from_user+0xb5/0x240 [ 3561.895016][T14994] ? kstrtou8_from_user+0x210/0x210 03:36:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3561.900246][T14994] proc_fail_nth_write+0x79/0x220 [ 3561.905285][T14994] ? proc_task_getattr+0x1e0/0x1e0 [ 3561.910412][T14994] ? proc_task_getattr+0x1e0/0x1e0 [ 3561.915558][T14994] vfs_write+0x28e/0xa30 [ 3561.919814][T14994] ksys_write+0x12d/0x250 [ 3561.924175][T14994] ? __ia32_sys_read+0xb0/0xb0 [ 3561.929089][T14994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3561.935001][T14994] do_syscall_64+0x2d/0x70 [ 3561.939423][T14994] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3561.946472][T14994] RIP: 0033:0x417ab1 [ 3561.950373][T14994] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3561.970085][T14994] RSP: 002b:00007f69cf689c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3561.978691][T14994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ab1 [ 3561.987359][T14994] RDX: 0000000000000001 RSI: 00007f69cf689cb0 RDI: 0000000000000003 [ 3561.996170][T14994] RBP: 00007f69cf689ca0 R08: 0000000000000000 R09: 0000000000000000 03:36:18 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3562.004276][T14994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3562.013590][T14994] R13: 00007ffd51fbafbf R14: 00007f69cf68a9c0 R15: 000000000119c034 03:36:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:18 executing program 5 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:18 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:18 executing program 4: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3562.212741][T15025] FAULT_INJECTION: forcing a failure. [ 3562.212741][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 3562.255100][T15025] CPU: 0 PID: 15025 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3562.264393][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3562.274603][T15025] Call Trace: [ 3562.277888][T15025] dump_stack+0x107/0x163 [ 3562.282229][T15025] should_fail.cold+0x5/0xa [ 3562.287842][T15025] ? io_uring_setup+0x4e4/0x38e0 [ 3562.293677][T15025] ? io_uring_setup+0x4e4/0x38e0 [ 3562.299810][T15025] should_failslab+0x5/0x10 [ 3562.304334][T15025] kmem_cache_alloc_trace+0x55/0x360 [ 3562.310360][T15025] io_uring_setup+0x4e4/0x38e0 [ 3562.315999][T15025] ? io_wq_submit_work+0x6f0/0x6f0 [ 3562.321129][T15025] ? wait_for_completion_io+0x260/0x260 [ 3562.327700][T15025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3562.333623][T15025] do_syscall_64+0x2d/0x70 [ 3562.339473][T15025] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3562.346461][T15025] RIP: 0033:0x45e219 [ 3562.350361][T15025] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3562.369985][T15025] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3562.379409][T15025] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3562.388049][T15025] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3562.396033][T15025] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 [ 3562.405023][T15025] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3562.413791][T15025] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 03:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:19 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:19 executing program 3: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:19 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3c, 0x39}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048841) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:19 executing program 4: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3562.600364][T15036] FAULT_INJECTION: forcing a failure. [ 3562.600364][T15036] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3562.642102][T15036] CPU: 0 PID: 15036 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 3562.650921][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3562.660988][T15036] Call Trace: [ 3562.664274][T15036] dump_stack+0x107/0x163 [ 3562.668621][T15036] should_fail.cold+0x5/0xa [ 3562.673134][T15036] _copy_from_user+0x2c/0x180 [ 3562.677826][T15036] io_uring_setup+0xa3/0x38e0 [ 3562.682523][T15036] ? io_wq_submit_work+0x6f0/0x6f0 03:36:19 executing program 4: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) 03:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3562.687648][T15036] ? wait_for_completion_io+0x260/0x260 [ 3562.693235][T15036] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3562.699491][T15036] ? vfs_write+0x18e/0xa30 [ 3562.703922][T15036] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3562.710178][T15036] ? fput+0x2a/0x50 [ 3562.714001][T15036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3562.719911][T15036] do_syscall_64+0x2d/0x70 [ 3562.724333][T15036] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3562.730241][T15036] RIP: 0033:0x45e219 03:36:19 executing program 5 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:19 executing program 3: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3562.734141][T15036] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3562.753757][T15036] RSP: 002b:00007fa0481a7be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3562.762208][T15036] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000045e219 [ 3562.770392][T15036] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000245d [ 3562.778388][T15036] RBP: 00007fa0481a7ca0 R08: 0000000020000400 R09: 0000000020000400 03:36:19 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan1\x00'}) r1 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) [ 3562.786361][T15036] R10: 00000000200003c0 R11: 0000000000000206 R12: 0000000020ffc000 [ 3562.794339][T15036] R13: 0000000020ff9000 R14: 0000000020000400 R15: 00000000200003c0 03:36:19 executing program 4: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 03:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:19 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 3562.906667][T15054] FAULT_INJECTION: forcing a failure. [ 3562.906667][T15054] name failslab, interval 1, probability 0, space 0, times 0 03:36:19 executing program 3: syz_io_uring_setup(0x24ec, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0) [ 3563.009169][T15054] CPU: 1 PID: 15054 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3563.018233][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.028291][T15054] Call Trace: [ 3563.031586][T15054] dump_stack+0x107/0x163 [ 3563.035928][T15054] should_fail.cold+0x5/0xa [ 3563.040461][T15054] ? io_uring_setup+0x506/0x38e0 [ 3563.045411][T15054] should_failslab+0x5/0x10 [ 3563.049925][T15054] kmem_cache_alloc+0x5b/0x440 [ 3563.054702][T15054] io_uring_setup+0x506/0x38e0 [ 3563.059505][T15054] ? io_wq_submit_work+0x6f0/0x6f0 [ 3563.065070][T15054] ? wait_for_completion_io+0x260/0x260 [ 3563.071374][T15054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3563.078434][T15054] do_syscall_64+0x2d/0x70 [ 3563.084768][T15054] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3563.092825][T15054] RIP: 0033:0x45e219 [ 3563.098173][T15054] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3563.119912][T15054] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3563.128360][T15054] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3563.136334][T15054] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3563.144313][T15054] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 03:36:19 executing program 3: syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 03:36:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:19 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) r1 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) [ 3563.152303][T15054] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3563.160301][T15054] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 03:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3563.224920][T15076] FAULT_INJECTION: forcing a failure. [ 3563.224920][T15076] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.291395][T15076] CPU: 1 PID: 15076 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 3563.300228][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.310303][T15076] Call Trace: [ 3563.313600][T15076] dump_stack+0x107/0x163 [ 3563.317958][T15076] should_fail.cold+0x5/0xa [ 3563.322485][T15076] ? io_uring_setup+0x4e4/0x38e0 [ 3563.327457][T15076] ? io_uring_setup+0x4e4/0x38e0 [ 3563.332424][T15076] should_failslab+0x5/0x10 [ 3563.336958][T15076] kmem_cache_alloc_trace+0x55/0x360 [ 3563.342283][T15076] io_uring_setup+0x4e4/0x38e0 [ 3563.347089][T15076] ? io_wq_submit_work+0x6f0/0x6f0 [ 3563.352239][T15076] ? wait_for_completion_io+0x260/0x260 [ 3563.357823][T15076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3563.363746][T15076] do_syscall_64+0x2d/0x70 [ 3563.368192][T15076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3563.374117][T15076] RIP: 0033:0x45e219 [ 3563.378037][T15076] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3563.397665][T15076] RSP: 002b:00007fa048186be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3563.406098][T15076] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000045e219 [ 3563.414093][T15076] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000245d [ 3563.422089][T15076] RBP: 00007fa048186ca0 R08: 0000000020000400 R09: 0000000020000400 [ 3563.430085][T15076] R10: 00000000200003c0 R11: 0000000000000206 R12: 0000000020ffc000 03:36:20 executing program 5 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3563.438080][T15076] R13: 0000000020ff9000 R14: 0000000020000400 R15: 00000000200003c0 03:36:20 executing program 1: pipe2(&(0x7f0000000440), 0x0) r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:20 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3563.605543][T15102] FAULT_INJECTION: forcing a failure. [ 3563.605543][T15102] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.667841][T15102] CPU: 0 PID: 15102 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3563.676665][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.687511][T15102] Call Trace: [ 3563.690804][T15102] dump_stack+0x107/0x163 [ 3563.696220][T15102] should_fail.cold+0x5/0xa [ 3563.700746][T15102] ? io_uring_setup+0x5cc/0x38e0 [ 3563.706131][T15102] ? io_uring_setup+0x5cc/0x38e0 [ 3563.711490][T15102] should_failslab+0x5/0x10 03:36:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3563.716006][T15102] __kmalloc+0x72/0x3e0 [ 3563.720183][T15102] io_uring_setup+0x5cc/0x38e0 [ 3563.724970][T15102] ? io_wq_submit_work+0x6f0/0x6f0 [ 3563.730104][T15102] ? wait_for_completion_io+0x260/0x260 [ 3563.735682][T15102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3563.741031][T15117] FAULT_INJECTION: forcing a failure. [ 3563.741031][T15117] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.755284][T15102] do_syscall_64+0x2d/0x70 [ 3563.755318][T15102] entry_SYSCALL_64_after_hwframe+0x44/0xa9 03:36:20 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3563.755348][T15102] RIP: 0033:0x45e219 [ 3563.755366][T15102] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3563.755386][T15102] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3563.797643][T15102] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3563.805638][T15102] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3563.813655][T15102] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 [ 3563.822782][T15102] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3563.830760][T15102] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 [ 3563.864018][T15117] CPU: 1 PID: 15117 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 3563.872809][T15117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.883143][T15117] Call Trace: [ 3563.886421][T15117] dump_stack+0x107/0x163 [ 3563.890751][T15117] should_fail.cold+0x5/0xa [ 3563.895247][T15117] ? io_uring_setup+0x506/0x38e0 [ 3563.900180][T15117] should_failslab+0x5/0x10 [ 3563.904679][T15117] kmem_cache_alloc+0x5b/0x440 [ 3563.909437][T15117] io_uring_setup+0x506/0x38e0 [ 3563.914221][T15117] ? io_wq_submit_work+0x6f0/0x6f0 [ 3563.919327][T15117] ? wait_for_completion_io+0x260/0x260 [ 3563.924895][T15117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3563.930783][T15117] do_syscall_64+0x2d/0x70 [ 3563.935208][T15117] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3563.941095][T15117] RIP: 0033:0x45e219 [ 3563.944976][T15117] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 1: pipe2(&(0x7f0000000440), 0x0) r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) [ 3563.964699][T15117] RSP: 002b:00007fa048186be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3563.973123][T15117] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000045e219 [ 3563.981088][T15117] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000245d [ 3563.989050][T15117] RBP: 00007fa048186ca0 R08: 0000000020000400 R09: 0000000020000400 [ 3563.997009][T15117] R10: 00000000200003c0 R11: 0000000000000206 R12: 0000000020ffc000 [ 3564.004974][T15117] R13: 0000000020ff9000 R14: 0000000020000400 R15: 00000000200003c0 03:36:20 executing program 5 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 03:36:20 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:20 executing program 1: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:20 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:21 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3564.313070][T15141] FAULT_INJECTION: forcing a failure. [ 3564.313070][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 3564.382844][T15141] CPU: 0 PID: 15141 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3564.386575][T15144] FAULT_INJECTION: forcing a failure. [ 3564.386575][T15144] name failslab, interval 1, probability 0, space 0, times 0 [ 3564.391643][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.391657][T15141] Call Trace: [ 3564.391665][T15141] dump_stack+0x107/0x163 [ 3564.391694][T15141] should_fail.cold+0x5/0xa [ 3564.391714][T15141] ? percpu_ref_init+0xcc/0x3a0 [ 3564.391738][T15141] ? percpu_ref_init+0xcc/0x3a0 [ 3564.391760][T15141] should_failslab+0x5/0x10 [ 3564.391784][T15141] kmem_cache_alloc_trace+0x55/0x360 [ 3564.391812][T15141] ? __io_openat_prep+0x390/0x390 [ 3564.391835][T15141] percpu_ref_init+0xcc/0x3a0 [ 3564.391858][T15141] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 3564.391889][T15141] io_uring_setup+0x676/0x38e0 [ 3564.470061][T15141] ? io_wq_submit_work+0x6f0/0x6f0 [ 3564.475191][T15141] ? wait_for_completion_io+0x260/0x260 [ 3564.480758][T15141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3564.486661][T15141] do_syscall_64+0x2d/0x70 [ 3564.491083][T15141] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3564.497007][T15141] RIP: 0033:0x45e219 [ 3564.500901][T15141] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3564.521295][T15141] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3564.529716][T15141] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3564.537715][T15141] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3564.545693][T15141] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 [ 3564.553680][T15141] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3564.563636][T15141] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 [ 3564.571710][T15144] CPU: 1 PID: 15144 Comm: syz-executor.0 Not tainted 5.11.0-rc3-syzkaller #0 [ 3564.580479][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.590538][T15144] Call Trace: [ 3564.593820][T15144] dump_stack+0x107/0x163 [ 3564.598165][T15144] should_fail.cold+0x5/0xa [ 3564.602670][T15144] ? io_uring_setup+0x5cc/0x38e0 [ 3564.608564][T15144] ? io_uring_setup+0x5cc/0x38e0 [ 3564.614276][T15144] should_failslab+0x5/0x10 [ 3564.619079][T15144] __kmalloc+0x72/0x3e0 [ 3564.623648][T15144] io_uring_setup+0x5cc/0x38e0 [ 3564.628431][T15144] ? io_wq_submit_work+0x6f0/0x6f0 [ 3564.634337][T15144] ? wait_for_completion_io+0x260/0x260 [ 3564.640180][T15144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3564.646087][T15144] do_syscall_64+0x2d/0x70 [ 3564.650505][T15144] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3564.656404][T15144] RIP: 0033:0x45e219 [ 3564.660605][T15144] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:21 executing program 5 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x24ec, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 3564.680971][T15144] RSP: 002b:00007fa0481a7be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3564.690078][T15144] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000045e219 [ 3564.698956][T15144] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000245d [ 3564.707105][T15144] RBP: 00007fa0481a7ca0 R08: 0000000020000400 R09: 0000000020000400 [ 3564.715827][T15144] R10: 00000000200003c0 R11: 0000000000000206 R12: 0000000020ffc000 [ 3564.724578][T15144] R13: 0000000020ff9000 R14: 0000000020000400 R15: 00000000200003c0 03:36:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:21 executing program 1: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) 03:36:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3564.826740][T15165] FAULT_INJECTION: forcing a failure. [ 3564.826740][T15165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3564.859944][T15165] CPU: 1 PID: 15165 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 03:36:21 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3564.868753][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.878826][T15165] Call Trace: [ 3564.882112][T15165] dump_stack+0x107/0x163 [ 3564.886458][T15165] should_fail.cold+0x5/0xa [ 3564.891146][T15165] __alloc_pages_nodemask+0x189/0x730 [ 3564.896612][T15165] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 3564.903565][T15165] ? up_write+0x191/0x560 [ 3564.907987][T15165] ? downgrade_write+0x3a0/0x3a0 [ 3564.913192][T15165] alloc_pages_current+0x18c/0x2a0 [ 3564.918574][T15165] __get_free_pages+0x8/0x40 [ 3564.923170][T15165] io_uring_setup+0x1513/0x38e0 [ 3564.928034][T15165] ? io_wq_submit_work+0x6f0/0x6f0 [ 3564.933153][T15165] ? wait_for_completion_io+0x260/0x260 [ 3564.938718][T15165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3564.944712][T15165] do_syscall_64+0x2d/0x70 [ 3564.949141][T15165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3564.955054][T15165] RIP: 0033:0x45e219 03:36:21 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x10, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) 03:36:21 executing program 1: r0 = io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0xd808, 0x0, 0x0, 0x16b}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/244, 0xf4}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/91, 0x5b}], 0x1) [ 3564.958955][T15165] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3564.978584][T15165] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3564.987018][T15165] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3564.994996][T15165] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3565.002974][T15165] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 [ 3565.011593][T15165] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3565.020311][T15165] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 03:36:21 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_io_uring_setup(0x4098, &(0x7f0000000200), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x245d, &(0x7f0000000180), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 03:36:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000100400", @ANYRES32=0x0, @ANYBLOB="80000010000000030000000441"]}) [ 3565.056231][T15165] general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN [ 3565.068245][T15165] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 3565.076666][T15165] CPU: 1 PID: 15165 Comm: syz-executor.5 Not tainted 5.11.0-rc3-syzkaller #0 [ 3565.085434][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3565.095498][T15165] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 3565.101495][T15165] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 [ 3565.121112][T15165] RSP: 0018:ffffc90003297d78 EFLAGS: 00010017 [ 3565.127197][T15165] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 3565.135180][T15165] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 3565.143497][T15165] RBP: ffff888020ec7480 R08: 0000000000000001 R09: 0000000000000003 [ 3565.152452][T15165] R10: fffff52000652fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 3565.161612][T15165] R13: 0000000000000001 R14: ffff888020ec7054 R15: ffff888020ec7000 [ 3565.170614][T15165] FS: 00007fb57ea30700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 3565.179547][T15165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3565.187222][T15165] CR2: 0000000000749138 CR3: 000000001208a000 CR4: 0000000000350ee0 [ 3565.196045][T15165] Call Trace: [ 3565.199639][T15165] io_uring_setup+0x12b1/0x38e0 [ 3565.204777][T15165] ? io_wq_submit_work+0x6f0/0x6f0 [ 3565.209905][T15165] ? wait_for_completion_io+0x260/0x260 [ 3565.215553][T15165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3565.222139][T15165] do_syscall_64+0x2d/0x70 [ 3565.226677][T15165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3565.232577][T15165] RIP: 0033:0x45e219 [ 3565.236914][T15165] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3565.257645][T15165] RSP: 002b:00007fb57ea2fbe8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3565.266684][T15165] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000045e219 [ 3565.275669][T15165] RDX: 0000000020ffe000 RSI: 0000000020000040 RDI: 00000000000024ec [ 3565.284730][T15165] RBP: 00007fb57ea2fca0 R08: 0000000020000100 R09: 0000000020000100 [ 3565.293651][T15165] R10: 0000000020000000 R11: 0000000000000206 R12: 0000000020ffe000 [ 3565.302524][T15165] R13: 0000000020800000 R14: 0000000020000100 R15: 0000000020000000 [ 3565.311378][T15165] Modules linked in: [ 3565.315847][T15165] ---[ end trace 260f93fe131edbdd ]--- [ 3565.322131][T15165] RIP: 0010:io_disable_sqo_submit+0xdb/0x130 [ 3565.328116][T15165] Code: fa 48 c1 ea 03 80 3c 02 00 75 62 48 8b 9b c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 14 01 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 83 [ 3565.347721][T15165] RSP: 0018:ffffc90003297d78 EFLAGS: 00010017 [ 3565.353787][T15165] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815976e0 [ 3565.357454][T15193] FAULT_INJECTION: forcing a failure. [ 3565.357454][T15193] name failslab, interval 1, probability 0, space 0, times 0 [ 3565.361760][T15165] RDX: 0000000000000022 RSI: 0000000000000004 RDI: 0000000000000114 [ 3565.361773][T15165] RBP: ffff888020ec7480 R08: 0000000000000001 R09: 0000000000000003 [ 3565.361787][T15165] R10: fffff52000652fa1 R11: 0000000000000001 R12: fffffffffffffff4 [ 3565.374441][T15193] CPU: 0 PID: 15193 Comm: syz-executor.0 Tainted: G D 5.11.0-rc3-syzkaller #0 [ 3565.382294][T15165] R13: 0000000000000001 R14: ffff888020ec7054 R15: ffff888020ec7000 [ 3565.390242][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3565.398190][T15165] FS: 00007fb57ea30700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 3565.408307][T15193] Call Trace: [ 3565.408316][T15193] dump_stack+0x107/0x163 [ 3565.416255][T15165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3565.426459][T15193] should_fail.cold+0x5/0xa [ 3565.435448][T15165] CR2: 0000000000749138 CR3: 000000001208a000 CR4: 0000000000350ee0 [ 3565.438705][T15193] ? percpu_ref_init+0xcc/0x3a0 [ 3565.443007][T15165] Kernel panic - not syncing: Fatal exception [ 3565.449591][T15193] should_failslab+0x5/0x10 [ 3565.477511][T15193] kmem_cache_alloc_trace+0x55/0x360 [ 3565.482784][T15193] ? __io_openat_prep+0x390/0x390 [ 3565.487799][T15193] percpu_ref_init+0xcc/0x3a0 [ 3565.492460][T15193] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 3565.498510][T15193] io_uring_setup+0x676/0x38e0 [ 3565.503265][T15193] ? io_wq_submit_work+0x6f0/0x6f0 [ 3565.508369][T15193] ? wait_for_completion_io+0x260/0x260 [ 3565.513903][T15193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3565.519800][T15193] do_syscall_64+0x2d/0x70 [ 3565.524223][T15193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3565.530126][T15193] RIP: 0033:0x45e219 [ 3565.534002][T15193] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3565.553770][T15193] RSP: 002b:00007fa0481a7be8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3565.562166][T15193] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 000000000045e219 [ 3565.570142][T15193] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000245d [ 3565.578112][T15193] RBP: 00007fa0481a7ca0 R08: 0000000020000400 R09: 0000000020000400 [ 3565.586257][T15193] R10: 00000000200003c0 R11: 0000000000000206 R12: 0000000020ffc000 [ 3565.594219][T15193] R13: 0000000020ff9000 R14: 0000000020000400 R15: 00000000200003c0 [ 3565.605707][T15165] Kernel Offset: disabled [ 3565.611501][T15165] Rebooting in 86400 seconds..