NFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:07 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:11 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:13 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:13 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:13 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) [ 1522.087018][T10237] list_del corruption. prev->next should be ffff888061f7b000, but was ffff888061ba6000. (prev=ffffffff8e5b0b20) [ 1522.104275][T10237] ------------[ cut here ]------------